Unstoppable Static Dist Calls on Django server

[yashrajvanshi]

I am not able to understand why there are repetative multiple calls coming up in logs for static files

**_admin/static/static/dist/static/dist/assets/js/static/static/dist/assets/static/dist/assets/js/php.php

/admin/static/static/dist/static/dist/assets/js/static/static/dist/assets/js/static/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/boot.ini

/admin/static/static/dist/static/dist/assets/js/static/static/dist/assets/js/static/dist/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/%f8%80%80%80%ae%f8%80%80%80%ae/etc/pas_swd**

These calls are repetative and making my instance slow. Did happened before a year ago and Stopped automatically. We use Angular 10 as Frontend technology couples with DRF - version -2.2.7

Can Anybody help me understand what is going wrong here

[bespokebob]

Those look like requests coming from a vulnerability scanner.

[yashrajvanshi]

Like Qualys right, but that scan was done on Friday and the calls are still coming through

[bespokebob]

Maybe your own scans are using Qualys, but if you're hosting a server on the internet, anyone can be scanning it with anything. You'd have to check your server logs for the source IP, user-agent headers, or anything else that would give you a clue. Regardless, this doesn't really have anything to do with DRF.

[yashrajvanshi]

Yup thanks, Thought of some thing related to static files or so, btw thanks for clearing this out.