this post was submitted on 12 Nov 2023
2 points (100.0% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
2
Just curious about this ip (alien.top)
submitted 10 months ago by 9acca9@alien.top to c/main@selfhosted.forum
11 comments fedilink hide all child comments
 

what could be the reason for an amazon ip in my nginx access.log file?

3.88.16.48 - - [11/Nov/2023:19:20:07 -0300] "GET / HTTP/1.1" 200 615 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"

https://www.abuseipdb.com/check/3.88.16.48

you are viewing a single comment's thread
view the rest of the comments
[–] multidollar@alien.top 1 points 10 months ago

I once had a Senior Infrastructure Engineer looking at the logs of our public VPN host. A VPN host that is open to the world on 0.0.0.0/0 because that's the requirement we had. This Engineer saw thousands of failed login attempts to the VPN; things like admin/admin admin/password1 etc. Regular internet crap, a bot will scrape the web page and try its luck then move on.

This person then decided to initiate security breach procedure and immediately shut down the VPN, because "we'd been hacked!".

There's a lot of noise on the internet. The challenge is working out the best way to isolate your resources just enough and block anything that doesn't need access. This is why things like Web Application Firewalls exist.