x.txt and POST Not Found URL Requests

  • Resolved jacksmithy

    (@jacksmithy)


    11 years, 3 months ago

    Hi

    I am getting a large number of URL requests from hackers using some kind of software to hack my sites. I presume it is some kind of injection / shell exploit attempts which is trying to find a loophole within the site by adding/calling x.txt and POST to nearly every URL.

    The url requests looks like these:

    http://www.domainname/article-name/POST
http://www.domainname/article-name/x.txt
http://www.domainname/tag/tag-name/POST
http://www.domainname/tag/tag-name/x.txt

    There are 1000s of these 404 requests, and they are only wasting my server traffic.

    Could you please let me know what is the best action to stop these requests/scans.

    Using WordPress 4.2.1

    Many thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator James Huff

    (@macmanx)

    11 years, 3 months ago

    With those URLs, it could also be a search bot indexing your site.

    Just in case, you may want to implement some (if not all) of the recommended security measures.

    Thread Starter jacksmithy

    (@jacksmithy)

    11 years, 3 months ago

    Thanks James, nearly all of the above WP security recommendation were already implemented. I was just checking if these requests are something to worry about and if there is a way to stop them.

    It is highly unlikely that they are caused by search engines while indexing the site, simply because of the number of 404 error pages are quite high.

    Once again thanks for your help anyway, I really appreciate it.

    Moderator James Huff

    (@macmanx)

    11 years, 3 months ago

    You’re welcome!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘x.txt and POST Not Found URL Requests’ is closed to new replies.