B
B
bad2322018-11-22 12:03:31
Apache HTTP Server
bad232, 2018-11-22 12:03:31

What are the requests?

Recently, my web server has been getting tons of requests like 5bf66ffd496e8345437587.png. Then requests of this type began to be sent (66.240.205.34 - - [21/Nov/2018:17:39:12 +0000] "Gh0st\xad" 400 0 "-" "-"). I googled Gh0st\xad, but alas, google didn't find anything. What are these requests?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
R
Roman Terekhin, 2018-11-28
@bad232

These are bots that scan for exploits. You can ignore it (unless, of course, you have an ancient WP with left plugins)
Take a look at the ssh logs if it hangs on your default port, be surprised)

Y
Yuri, 2018-11-27
@modestguy

Most likely a Trojan. Check.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question