HTTP tarpit s Nginx

[Andrej Kvasnica]

V error logu http servera nachadzam stale tie iste pokusy o nacitanie

/scripts/setup.php
/MyAdmin/scripts/setup.php
/mysql/scripts/setup.php
/phpmyadmin/scripts/_setup.php

a podobnych adries.

Na serveri nie je php, mysql ani phpmyadmin takze nic nehrozi, len je to otravne.
Napadlo mi, ze by to mohol nginx pre tieto URL reverzne proxovat na nejaky tarpit server ktory by detom spomalil ich scannovacie pokusy.

Nginx http tarpit nema a ani som pren nenasiel ziadny tarpit plugin.

Nasiel som https://nullprogram.com/blog/2019/03/22/ kde je pekny python script urceny presne na toto.

Mate niekto skusenosti s tymto alebo aj inym sposobom spomalovania http script kiddies?

[Reklama]

[alex6bbc]

a co to nginxem preproxovat na nejaky shitoidni server, kde by ty instalace byly s nejakymi fiktivnimi db atd.
a to by mohlo logovat detaily utoku.

[Andrej Kvasnica]

a co to nginxem preproxovat na nejaky shitoidni server, kde by ty instalace byly s nejakymi fiktivnimi db

ono to skusa aj ine veci ako phpmyadmin, takze by ten spomalovac mal byt univerzalny