We have a Node.js based web application, that has routes like:
We tracked strange requests, which lead to 404 on this routes. The requests were to routes like:
/posts/phpinfo.php /posts/.user.ini /posts/info.php3 /posts/phptest.php
Neither we're using PHP nor do i know anything about it...
To me it seems that a crawler/bot is requesting these routes, using some PHP related stuff as
postIds which makes no sense (to me)...
Is this legit, though useless, or a security related issue?
What could cause this?