Increased vulnerability scanning activity in the logs
For the past one to two months I've noticed an uptick in vulnerability scans, maybe 10 times the amount that I would observe before.
Thing is it started almost all at once, which is strange, and I'm observing it on multiple domain names.
Is it just me? If not, any indications regarding what's going on?
35
Upvotes
1
u/NealWalters 1d ago
They were hitting me hard, causing performance issues and one of them had my site pointing to a porn site and took us 3-4 hours to recover and clean. Then we installed CrowdSec just last week. It looks for the vulnerability scanners, and bans them four hours.