News for hackers. Stuff that matters.

A comment on Botspam apocalypse. Parent comment

Re:Botspam apocalypse by efitz on Thursday August 04, 2022 @03:19AM (#32340138)
Also, attackers are rarely going to try to guess your URLs - they’re going to find them via Google or Shodan, or, if you’re a good rest citizen, via “/<yourapp>/“
[ Parent | on HN ]
Re:Botspam apocalypse by raverbashing on Thursday August 04, 2022 @04:59AM (#32340721)
Any website gets probed for wp-admin.php etc, even if you don't use WP
[ Parent | on HN ]
Re:Botspam apocalypse by BiteCode_dev on Thursday August 04, 2022 @06:01AM (#32341082)
In fact, if someone is probing for wp-admin, you should insta ban them, no matter the site.
[ Parent | on HN ]
Re:Botspam apocalypse by marginalia_nu on Thursday August 04, 2022 @09:12AM (#32342411)
I get quite a lot of guesses in my logs, probing in /solr/ and so on (fairly pointlessly, I might add, as I run bespoke software).
[ Parent | on HN ]
Re:Botspam apocalypse by bryanrasmussen on Thursday August 04, 2022 @03:51AM (#32340306)
>Also, attackers are rarely going to try to guess your URLs -

because then the attack becomes DOS as they cycle through dictionaries of words?

[ Parent | on HN ]