• 3 Posts
  • 8 Comments
Joined 4 years ago
cake
Cake day: June 9th, 2021

help-circle


  • Well, I wasn’t posting looking for technical information but now you have me curious :).

    Looking at the logs, they strongly suggest automated bot activity. Hits from Googlebot and other search crawlers WordPress vulnerability scanners Automated scanning tools like ZGrab

    Are these triggering login attempts either by mistake or as part of their crawling process? Googlebot, for example, accesses various URLs, including login pages, and might cause login events.

    Many of the requests are targeting /wp-admin/setup-config.php, /wordpress/wp-admin/setup-config.php, /xmlrpc.php, /wlwmanifest.xml, and similar WordPress-related URLs.

    Since it’s not a WP site, are these requests resulting in redirects or 301 responses, but getting counted in access logs that result in the dashboard stats?