New requests for /cache/ URLs

Question

A few weeks ago requests following this type of pattern:

http://mysite/cache/7a226e8aa3a4380444a329a7b0dd0f40  
http://mysite/otherfolder/cache/7a226e8aa3a4380444a329a7b0dd0f40

started to appear in my logs. Almost all the requests come from Indian IPs. Anybody know what is generating these requests and the intent?

I have the same issue, so just checking. Do you have google analytics installed? — Dmitry Dzygin, Jun 20 '12 at 7:54
A similar discussion stackoverflow.com/questions/11017609/… — Dmitry Dzygin, Jun 20 '12 at 9:20
@DmitryDzygin - yes I have analytics installed. Yes, it's similar to the .../undefined post you linked (which I also get) but sufficiently different that I don't believe that the two are related. — Guy, Jun 20 '12 at 14:46
cache/7a226e8aa3a4380444a329a7b0dd0f40 I am having the same hash requests, coming only from chrome though — digitalPBK, Dec 8 '12 at 11:48
Maybe it's an extension? Seriously, the developers of such extensions should be shot on location. — Mathias Lykkegaard Lorenzen, Jun 11 '13 at 13:32

Andrew Lott · Accepted Answer · 2013-06-12 09:49:17Z

1

I found an answer. As I suspected, it was an error caused by an extension.

Anyway, here's an article describing the issue.

Add the following code to your JavaScript, and everything will be fine.

window.suggestmeyes_loaded = true;

Don't ask why it's needed, but it works. No more /cache/ issues from now on.

Andrew Lott

5,7043 gold badges18 silver badges41 bronze badges

answered Jun 12 '13 at 8:24

1516 bronze badges

add a comment |

Zistoloen · Accepted Answer · 2013-06-12 08:32:48Z

0

Seems like a script in search of exploit, Google for all exploits related to your CMS with word cache published within the last month.

Zistoloen

9,9285 gold badges32 silver badges59 bronze badges

answered Aug 16 '12 at 20:51

berezovskyi

4001 silver badge5 bronze badges

add a comment |

2 Answers 2