We've been logging GET requests on our domain to the following:


Is this a known kind of attack? What might it be targeting?

2 Answers 2


Try asking on https://security.stackexchange.com/

It doesn't look like a hacking attempt, unless Your CMS/framework has some functionality on XX/YY/ZZ/CI/ path.


This type of "attacks" can be used to generate a 404 message. Hackers do this in order to find out what kind of web server you have. Or to find out what kind of framework you use. (Based on the structure of the 404 HTML code.)

If they find out what server you have and what CMS/framework (and version) then they can use this information to hack into your website.

I recommend you to keep everything up to date. There is not a lot more you can do against those requests.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.