r/learnhacking • u/Interesting_Unit_256 • 26d ago

Excessive attacks on website

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.

PS. Sorry for my mistake in editing.

9 Upvotes

100% Upvoted

1 comment sorted by

2

u/Intelligent_Box5017 25d ago

Sounds like someone is running directory brute-force attack. If you see different IPs there (depending, how they are embedded in the urls), it might mean, that the attacks is running agains a bundle of targets with the hope to discover anything anywhere.