• 2 Posts
  • 283 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle








  • Should I worry?

    I’ve had this stuff in logs since the late 90’s. It was concerning at first, but port scanning and scripts are the internet’s background static now.

    Is this normal internet behaviour?

    Yup. Welcome to self hosting!

    Should I expect even worse kinds of attacks?

    Not that it will happen, but good security expects attacks. I like to say “Obscurity is not security.”

    What can I do to improve security on my website and try to block these kinds of requests/attacks?

    As these scrips are targeting code you don’t run, they can be ignored relatively safely.

    You can take a couple steps to lock things down like not responding to ping on WAN (less enticing to port scanning) locking down firewall settings, geolocation blocking, authentication, etc.

    That said, if the script changed to something you DO host, you may be in for a bad day. Good to stay on top of security patches in that case.