3 ms·

I have a Google App Engine instance, and it started getting a lot of random requests, which may be related to this. My website had 5,000 requests yesterday (nor

by webo 12y ago

I have a Google App Engine instance, and it started getting a lot of random requests, which may be related to this. My website had 5,000 requests yesterday (normally less than 50). The logs indicate a lot of these: 221.145.183.89 - - [16/Dec/2014:04:11:43 -0800] "GET /bbs/zboard.php?id=notice& no=41&PHPSESSID=98802904391cd2920f0473f7956305be HTTP/1.1" 404 Might be some kind of DNS forwarding issue, but I don't my server handling unnecessary requests. What can I do?

McGlockenshire 12y ago
That's an unrelated probe for a different, surely vulnerable, script - Zeroboard. If the attack probes disturb you, begin gathering their patterns and plonking their IPs into a black hole using something like fail2ban. Er, well, that's what I'd do on a normal system. Not sure what to do about that on GAE.
- webo 12y ago
  Thanks for the heads up. Didn't know about Zeroboard. In case anybody is wondering, it is pretty easy block IPs as well.