<![CDATA[iRedMail — A bot is scraping for informations.]]> 2026-09-08T01:34:48Z PunBB https://forum.iredmail.org/topic21215-a-bot-is-scraping-for-informations.html <![CDATA[Re: A bot is scraping for informations.]]> Nginx doesn't have a builtin solution, you can find many solutions by searching "Nginx block bots" with Google, or AI.

]]> https://forum.iredmail.org/user2.html 2026-09-08T01:34:48Z https://forum.iredmail.org/post92225.html#p92225 <![CDATA[A bot is scraping for informations.]]> ==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  1.8.7 downloadable
- Linux/BSD distribution name and version:     Ubuntu 2024.04.4 LTS
- Store mail accounts in which backend:       MySQL MariaDB
- Web server (Apache or Nginx):         NGINX
====

Logwatch daily log shows that warning.

A total of 456 possible successful probes were detected (the following URLs  contain strings that match one or more of a listing of strings that  indicate a possible exploit):

    /?path=../../../../../.env.development&_=4L7Jw2Td HTTP Response 200
    /?doc=../../../../../web.config&_=IeglGrJV HTTP Response 200
    /?doc=../../../../../etc/passwd&_=sejwYysz HTTP Response 200
[...]

It is a bot searching for info, already checked that none of those requests were answered with valid data.   

How to block this kind of attacks?

Thank you.

]]> https://forum.iredmail.org/user51544.html 2026-09-07T12:38:28Z https://forum.iredmail.org/post92224.html#p92224