too many log entry in cloudhub with hnap1

Question

Hi All,

We are noticing that someone is trying to access the api deployed in cloudhub as we can see in the logger with below information

**listener found for request: (GET)/manager/html **listener found for request: (POST)/HNAP1/ **listener found for request: (POST)/CGI/Execute None of us are trying to access the api with above url but seeing these logging in cloudhub log. Can any one suggest on this?

Answer 1

Sep 06, 2018 at 04:56 PM, ullgren answered with:

Probably a worm or trojan scanning for systems that has known vulnerabilities in common web applications and platforms. The /manager/htmlis probably a probe to check if you are running a tomcat server with the manager console exposed and unprotected.

This is common and as long as you are not running vulnerable versions of the software in question not much you can do about it.

Add comment

10 |1200 characters needed characters left characters exceeded

too many log entry in cloudhub with hnap1

1 Reply

Your answer

Like this question?

Who's following the question

Related Questions