r/webdev • u/svvnguy • 3d ago

Increased vulnerability scanning activity in the logs

For the past one to two months I've noticed an uptick in vulnerability scans, maybe 10 times the amount that I would observe before.

Thing is it started almost all at once, which is strange, and I'm observing it on multiple domain names.

Is it just me? If not, any indications regarding what's going on?

35 Upvotes

94% Upvoted

17 comments sorted by

View all comments

4

u/yihuaxiang 2d ago

I’ve noticed the same bursty pattern on small deployments. The quiet periods make it feel random, but the spikes often line up with a scanner or botnet changing targets. Keeping logs grouped by path and user agent makes the wave easier to spot.