9 ms·
On a related note, the number of HTTP 404 errors I see to /wp-login.php on my static website is ridiculous. (But absolutely not security risk.)
by mkasberg 3y ago
On a related note, the number of HTTP 404 errors I see to /wp-login.php on my static website is ridiculous. (But absolutely not security risk.)
- pepa65 3y agoThat's what you get running a webserver. This is what should happen (but you could choose not to log those...)
- NateEag 3y agoYou could also temp-ban those IPs for a few hours and save yourself some CPU and bandwidth. It may not seem like much, but I spent a year or two adminning a >1 million reqs / day cluster, and it does add up. Auto-banning this type of obvious offender (with fail2ban, as it happens) did result in a noticeable improvement for us.
- pepa65 3y agoYou could indeed (temp-)ban them based on logs. Of course it is a huge improvement, if you catch offending IPs early, they never hit any app.