⚰️ Website VM - Turn it off

SSWConsulting / SSW.Website

Generator for ssw.com.au

https://www.ssw.com.au

Apache License 2.0

8 stars 8 forks source link

⚰️ Website VM - Turn it off #2998

Closed jeoffreyfischer closed 2 months ago

jeoffreyfischer commented 2 months ago

TODO fill in

FrontDoor logs
IIS logs
Sys Admin

amankumarrr commented 2 months ago

no logs found from Front Door for v1 site

Figure: Front door logs for the past 7 days

amankumarrr commented 2 months ago

@chrisschultzssw @wicksipedia

We switched off the VM, but with the help of @wicksipedia, we discovered that there was still traffic on our v1 site, so Chris S turned it back on. Over the past 7 days, we've had around 15k requests to the server. We need to investigate where this traffic is coming from.

amankumarrr commented 2 months ago

Attaching the log file from IIS server. iis-logs.xlsx

amankumarrr commented 2 months ago

We found around 15,492 hits on the IIS server for the past 7 days. Upon further investigation:

15,445 were the direct requests to the server, either via IP address or from prod.ssw.com.au
27 requests were bots trying to find /owa endpoint which doesn’t exist
10 were bots from China
10 were digital bots hosted by Digital Ocean

amankumarrr commented 2 months ago

✅Done - As per @chrisschultzssw, the VM is turned off and we will be decommissioning it in a week.