[Not Found Report] messages in email

Moderator
Depuis Lithuania
Membre depuis mars 2016

I'm getting these [Not Found Report] messages in my email almost daily. Is this litecart function?

If yes how should I fix them? Or this might be a hosting thing?

tim
Founder
Depuis Sweden
Membre depuis mai 2013
tim

LiteCart logs these not found urls that returned a 404 not found error. The report is sent as soon as it reaches 100 entries.

You are probably target of evil robots scanning your site, trying to identify your platform and find vulnerabilities.

tim
Founder
Depuis Sweden
Membre depuis mai 2013
tim

There is no on off switch for this feature. You would just have to remove the line of code that sends the email.
https://github.com/litecart/litecart/blob/dev/public_html/includes/library/lib_route.inc.php#L141-L145

Previously everything was just saved in a log file. Then a guy rang the alarm that an attacker could flood the site making these logs build up until disk quota was exceeded. So I had the list dumped after 100 unique lines.

To stop these evil bots you would need a Web Application Firewall (WAF). There are several vendors out there who provide these.
I have a self developed WAF that a few clients use that does an awesome job. But it's way too complex for releasing as an add-on just now.

Nelano has one published for LiteCart
https://www.litecart.net/en/addons/306/nelano-secure

tim
Founder
Depuis Sweden
Membre depuis mai 2013
tim

Yes, the bad bot trap in previous versions caught some of the good bots as well. And although the links where noindex MSNbot completely disobeyed it ending up in hundreds of thousands indexed urls in Bing. It simply had too many downsides and needed to be continously maintained. So it was removed.

My WAF is a completely new make, not based on any previous components.

Merchant
Depuis Netherlands
Membre depuis avr. 2015

Having the same problem here, they come in daily by the dozen.

If your WAF was available in the shop, I would buy it.

Ce fil de discussion a été fermé en raison d'une longue inactivité. Il n'est pas possible de publier dessus.
Ce site n'utilise aucun cookie ni aucune technologie de suivi tierce. Nous pensons pouvoir faire mieux que les autres et nous nous soucions vraiment de votre vie privée.