Not sure if I should report it here, but within my website I collect each request in DB, and from time to time view these records. Among data collected are user agent, reqested url, referrer (i.e. previous) url, time, and others.
Today I found a following user agent bot (which seems to hide this):
(Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Most of requests are within 1-2 seconds intervals, and the most interesting is what urls it wants my server to check:
| /wp/wp-login.php | | /blog/wp-login.php | | /site/wp-login.php | | /cms/wp-login.php | | /section/wp-login.php | | /wp-admin/wp-login.php | | /wordpress/wp-login.php |
(from my DB)
Referrer in each cases is null (meaning there was no referrer; it expected to find a webpage at this uri).
Why a bot may possibly want to check if there is a wordpress installed on a webpage, and what is its url (my website doesn't use wordpress, or any other CMS)? To me, it's like searching for a possible way to get into an admin panel of the website. And I do have an admin panel which I created myself.
Should I do anything about it?