I was looking in my google analytics and discovered a few php hits to pages that, as a rails site obviously not apart of it. Here's an example:


There's quite of few of them. Are these hijack attempts or attacks. If so how do I stop them?

  • It could be a malicious trawler, or it could be innocent. How long have you had the domain? A previous owner might have had a process.php URL to which this would be possibly legitimate traffic. – GeoffAtkins Sep 5 '19 at 12:22
  • You can check further, check secondary dimensions for user agent, location, etc. This info should give you some insight to how likely this is to be legitimate. – GeoffAtkins Sep 5 '19 at 12:23
  • @GeoffAtkins The site is brand new in the sense I just started doing promo for it. I've had the domain for a while. – Carl Edwards Sep 5 '19 at 12:25
  • 1
    These look like landscaping or hack attempts. If you are delivering a 404 error for these pages, I would not worry about it. These things happen. Make sure your software is up to date and any code you have written is secure and let it go. – closetnoc Sep 9 '19 at 20:13
  • We can't tell you more about this without knowing if this is part of your site. As closetnoc says, if you are returning 404 there should be nothing to worry about. – Stephen Ostermiller Nov 13 '19 at 16:40

Browse other questions tagged or ask your own question.