The entry below is from the visitors log in c-panel
Host: .
/specific legimate-wordpress-post/
Http Code: 503
Date: Jul 24 09:28:06
Http Version: HTTP/1.1
Size in Bytes: 1118
Referer: http://mywebsite.com/
Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/536.28.10 (KHTML, like Gecko) Version/6.0.3 Safari/536.28.10
/?_wfsf=unlockEmail
Http Code: 200 Date: Jul 24 09:28:06 Http Version: HTTP/1.1 Size in Bytes: 242
Referer: http://mywebsite.com/specific-legimate-wordpress-post/
Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/536.28.10 (KHTML, like Gecko) Version/6.0.3 Safari/536.28.1
The entry below is from the raw access log in c-panel
. - - [24/Jul/2014:09:28:06 -0500] "GET /specific-legitimate-wordpress-post/ HTTP/1.1" 503 1118 "http://mywebsite.com/" "Mozilla/5.0 Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/536.28.10 (KHTML, like Gecko) Version/6.0.3 Safari/536.28.10"
. - - [24/Jul/2014:09:28:06 -0500] "GET /?_wfsf=unlockEmail HTTP/1.1" 200 242 "http://mywebsite.com/specific-legitimate-wordpress-post/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/536.28.10 (KHTML, like Gecko) Version/6.0.3 Safari/536.28.10"
This site is on a shared server so there is no access to server configuration files. Would you use hosts.deny and .htaccess to stop such a hacker and if so please explain how in detail. Thanks.