SitePoint Sponsor

User Tag List

Results 1 to 4 of 4
  1. #1
    SitePoint Zealot 2ndmouse's Avatar
    Join Date
    Jan 2007
    Location
    West London
    Posts
    196
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Why would someone aim a URL at my site that appears to be testing wordfence/ajax

    I see the following URL request in my logs - Anyone know why they would want to test wordfence/ajax?

    mydomain.com/wordpress/wp-admin/admin-ajax.php?action=wordfence_testAjax

    Response:
    WFSCANTESTOK

    Maybe it's to see if wordfence is installed or maybe wordfence has weak spot???? Anyone!

    Wordfence is a wordpress security plugin
    Detect file changes remotely. SimpleSiteAudit is an early
    warning anti-hacker system which sends an alert on detection.

    PHP Find Orphan Files - Finds all the unreferenced files on your site.

  2. #2
    SitePoint Zealot 2ndmouse's Avatar
    Join Date
    Jan 2007
    Location
    West London
    Posts
    196
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Panic over. It appears to be coming from my own installation of wordfence, so I guess there's nothing to fear. Sorry to waste your time.
    Detect file changes remotely. SimpleSiteAudit is an early
    warning anti-hacker system which sends an alert on detection.

    PHP Find Orphan Files - Finds all the unreferenced files on your site.

  3. #3
    Certified Ethical Hacker silver trophybronze trophy dklynn's Avatar
    Join Date
    Feb 2002
    Location
    Auckland
    Posts
    14,650
    Mentioned
    19 Post(s)
    Tagged
    3 Thread(s)
    2m,

    I was about to say that someone was testing to see whether you had a security breach available for a known exploit - that's what I would have expected (and would have locked down tight before anyone could visit).

    If it's from your own website, that doesn't mean that there was not a hacker testing your website so, please, investigate further!

    Regards,

    DK
    David K. Lynn - Data Koncepts is a long-time WebHostingBuzz (US/UK)
    Client and (unpaid) WHB Ambassador
    mod_rewrite Tutorial Article (setup, config, test & write
    mod_rewrite regex w/sample code) and Code Generator

  4. #4
    SitePoint Zealot 2ndmouse's Avatar
    Join Date
    Jan 2007
    Location
    West London
    Posts
    196
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks dklynn

    I've already battened down the hatches, but I think I'll have a word with the wordfence people - see if I should expect this kind of query. It's just that I have been using wordfence for some months now, and I've never seen it before.
    Detect file changes remotely. SimpleSiteAudit is an early
    warning anti-hacker system which sends an alert on detection.

    PHP Find Orphan Files - Finds all the unreferenced files on your site.


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •