News for hackers. Stuff that matters.

A comment on Who's Attacking My Server?. Parent comment

Re:Who's Attacking My Server? by anderspitman on Sunday March 13, 2022 @02:44PM (#30664435)
I'm curious, is it common for scanners to look for vulnerabilities in bespoke servers, or do they usually look for known vulnerabilities in specific versions of popular servers like WordPress, Apache, etc?
[ Parent | on HN ]
Re:Who's Attacking My Server? by plufz on Sunday March 13, 2022 @04:03PM (#30665168)
My experience is a mix of both. Lots of looking for wordpress, phpmyadmin, etc but also scraping my own GET-parameters and FORMs looking for sql exploits etc.
[ Parent | on HN ]
Re:Who's Attacking My Server? by bombcar on Sunday March 13, 2022 @03:02PM (#30664610)
They’re almost always looking for known vulnerabilities dumbly - you’ll see one IP try fifteen-fifty different URL based attacks.
[ Parent | on HN ]