[Not Found Report] messages in email

Moderator
From Lithuania
Member since Mar 2016

I'm getting these [Not Found Report] messages in my email almost daily. Is this litecart function?

If yes how should I fix them? Or this might be a hosting thing?

tim
Founder
From Sweden
Member since May 2013
tim

LiteCart logs these not found urls that returned a 404 not found error. The report is sent as soon as it reaches 100 entries.

You are probably target of evil robots scanning your site, trying to identify your platform and find vulnerabilities.

tim
Founder
From Sweden
Member since May 2013
tim

There is no on off switch for this feature. You would just have to remove the line of code that sends the email.
https://github.com/litecart/litecart/blob/dev/public_html/includes/library/lib_route.inc.php#L141-L145

Previously everything was just saved in a log file. Then a guy rang the alarm that an attacker could flood the site making these logs build up until disk quota was exceeded. So I had the list dumped after 100 unique lines.

To stop these evil bots you would need a Web Application Firewall (WAF). There are several vendors out there who provide these.
I have a self developed WAF that a few clients use that does an awesome job. But it's way too complex for releasing as an add-on just now.

Nelano has one published for LiteCart
https://www.litecart.net/en/addons/306/nelano-secure

tim
Founder
From Sweden
Member since May 2013
tim

Yes, the bad bot trap in previous versions caught some of the good bots as well. And although the links where noindex MSNbot completely disobeyed it ending up in hundreds of thousands indexed urls in Bing. It simply had too many downsides and needed to be continously maintained. So it was removed.

My WAF is a completely new make, not based on any previous components.

Merchant
From Netherlands
Member since Apr 2015

Having the same problem here, they come in daily by the dozen.

If your WAF was available in the shop, I would buy it.

This thread has been closed due to long inactivity. Posting to it is not possible.
This website uses no cookies and no third party tracking technology. We think we can do better than others and really think about your privacy.