[Security] Unknown and suspect POST requests in logs server.

radek

Since longer time I'm finding Unknown and suspect POST request in logs server

POST /component/acym/frontusers.html?tmpl=component

It's hacking or other abnormal requests?

mihha

This is perfectly valid and correct POST request from AcyMailing

radek

Ok,but this request was send by robot

IP - - [26/Jul/2021:22:33:19 +0200] "GET / HTTP/1.1"
IP - - [26/Jul/2021:22:33:20 +0200] "POST /component/acym/frontusers.html?tmpl=component HTTP/1.1"

IP - - [25/Jul/2021:02:23:46 +0200] "GET / HTTP/1.1"
IP - - [25/Jul/2021:02:23:47 +0200] "POST /component/acym/frontusers.html?tmpl=component HTTP/1.1"

It's hacking or only spam?

mihha

Why do you think it was sent by a robot?

radek

22:33:19 request GET
22:33:20 - after one second - request POST
This is automatically requests.

radek

Do you know answer? It's hacking or only spam?

Alexandre

Hi,

I definitely think its only people trying to DDOS your website.
Maybe you have more details about it? Such as the parameters posted? So we can have a look ;-)

radek

no I has only logs server.