Web app running 6699-5464 standard app server on a AWS EC2 instance (with AWS load balancer).
I've already submitted a service ticket to AWS support but I thought I'd reach out here too.
I'm getting a ton of, what appears to me, hits from outside sources trying to exploit possible vulnerabilities. This is causing what looks like a lot of 500 (and 404) errors.
Here is the xbasic stack log...
My question here is what might I do to mitigate this?
I've already submitted a service ticket to AWS support but I thought I'd reach out here too.
I'm getting a ton of, what appears to me, hits from outside sources trying to exploit possible vulnerabilities. This is causing what looks like a lot of 500 (and 404) errors.
Here is the xbasic stack log...
Code:
Component not found: 404_ErrorThu May 21 08:22:07 2020 Thread: AppServerWorker8 Request URI: /latest/dynamic/instance-identity/document Script: " /latest/dynamic/instance-identity/document" Line: 38 ?x__404_Error.Output.Head.Title Property not found x__404_Error.Output.Head.Title subelement not found. Execution Stack: 0#1 evaluate_shared_private( 0#39 OOhttpdServerClientMIME(ptemp,"AppServerMain") 0#2 A5WCallResult = evaluate_a5w_to_response(page_contents,Response,quote(" " + eval_settings.global.Request.ScriptName),eval_settings,EVALUATE_A5W_TIMEOUT,RequestBundle.RequestInfo.Filename.Path) 0#38 ========================================================== Component not found: 500_ERRORThu May 21 08:22:07 2020 Thread: AppServerWorker8 Request URI: /latest/dynamic/instance-identity/document Script: " /latest/dynamic/instance-identity/document" Line: 38 ?x__500_ERROR.Output.Head.Title Property not found x__500_ERROR.Output.Head.Title subelement not found. Execution Stack: 0#1 evaluate_shared_private( 0#39 OOhttpdServerClientMIME(ptemp,"AppServerMain") 0#2 A5WCallResult = evaluate_a5w_to_response(page_contents,Response,quote(" " + eval_settings.global.Request.ScriptName),eval_settings,EVALUATE_A5W_TIMEOUT,RequestBundle.RequestInfo.Filename.Path) 0#38 ========================================================== Component not found: 500_ERRORThu May 21 08:22:07 2020 Thread: AppServerWorker8 Request URI: /latest/dynamic/instance-identity/document Script: " /latest/dynamic/instance-identity/document" Line: 38 ?x__500_ERROR.Output.Head.Title Property not found x__500_ERROR.Output.Head.Title subelement not found. Execution Stack: 0#1 evaluate_shared_private( 0#39 OOhttpdServerClientMIME(ptemp,"AppServerMain") 0#2 A5WCallResult = evaluate_a5w_to_response(page_contents,Response,quote(" " + eval_settings.global.Request.ScriptName),eval_settings,EVALUATE_A5W_TIMEOUT,RequestBundle.RequestInfo.Filename.Path) 0#38 ========================================================== Component not found: 500_ERRORThu May 21 10:02:09 2020 Thread: AppServerWorker4 Request URI: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Script: " /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" Line: 38 ?x__500_ERROR.Output.Head.Title Property not found x__500_ERROR.Output.Head.Title subelement not found. Execution Stack: 0#1 evaluate_shared_private( 0#39 OOhttpdServerClientMIME(ptemp,"AppServerMain") 0#2 A5WCallResult = evaluate_a5w_to_response(page_contents,Response,quote(" " + eval_settings.global.Request.ScriptName),eval_settings,EVALUATE_A5W_TIMEOUT,RequestBundle.RequestInfo.Filename.Path) 0#38 ==========================================================
My question here is what might I do to mitigate this?
Comment