We have been contacted by our server host provider about Unwanted and or Abusive Web http Requests going out from our server. The information they gave us are.
- Block Type: New Ban
- Time: 2015-10-01 17:26:23-07:00
- Port: 80
- Service: http
- Targeted Range: ip
- Targeted URL: wp-login.php
- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
- GET/POST Arguments Sent: pwd, wp-submit, testcookie, log
How can I find out what website or script send out the request. I check all my logs files for the above information but couldn't find any record or may be I have checked wrong log files. Appreciated for any type of help.
Forgot to mention that our server has linux CENTOS 6 OS installed. The request is going out from our server, targeting a wordpress website, means may be a module in our website is requesting or trying to login to other websites to get some information.