Last port of call

I watch my logs like a hawk. (Like a very bored hawk.) Over the last few months, I have been seeing an increase in blind web attacks. This is where an attacker has a long list of potentially vulnerable URLs (e.g., /wp_login.php, /login.action, /shell.php) and they step through each one "just in case" the server might be vulnerable to their exploit. None of these URL paths exist on my servers, but the attackers don't care. For them, it's faster to blindly try the exploit and see if it worked than...

Submit