Question

Why would a random IP in China try to send a request for my web server at "/mstatic/sales/css/sales.css?v=6"? What would they be scanning for?

Was it helpful?

Solution

I assume they were performing recon stage of hacking or they were script kiddies that could use google dork to find vulnerable website or nodes. I would suggest you to secure your page using .htaccess and via your cPanel to disable directory traversal. This is also considered to be dangerous, as the attacker could make use of any available information to map and learn the target. Those CSS lines may contain crucial information i.e. comments left by designer, email addresses, full names and so on

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top