S
S
sashabeep2020-10-26 22:50:07
DDoS Protection
sashabeep, 2020-10-26 22:50:07

How to understand if this is an attack or someone's browser is weird?

On one of the client sites, for several days in a row, the same client is knocking on one page at a manic speed, about 10 requests per second.

XX.XX.XXX.XX - - [25/Oct/2020:05:03:46 +0300] "POST /E54BECF9-1369-3E45-B511-3316F466DF16/2D3553E0-0E6D-B849-A335-EF9705CA14DB/except HTTP/2" 404 3448 "https://*********.ru/info/delivery" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 YaBrowser/20.9.2.101 Yowser/2.5 Safari/537.36"

An ordinary text page with a minimum of data, there is nothing to accept POST.
IP belongs like one of the local providers. Naturally, I immediately left for Deny and reported to the provider's watermelon team.

An assumption crept in - maybe someone has a tab open and the browser refreshes the page, going crazy? Although, what does POST have to do with it then - it's not clear

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question