A bit of an update:
So I take it down, reinstall wordpress, nothing changes. So I take it down completely and nothing changes, even though the wordpress files are all gone, even though every hit is just loading an error page, the “POST / HTTP/1.1” hits just keep coming. There is nothing in the web root for the domain other than .htaccess and error.html.
The hits seem to come from all over the place. I had a look with mod_post_log and things look like this:
POST / HTTP/1.1
Host: example.com
Connection: keep-alive
Referer: https://example.com/some-page-on-the-site/
Content-Length: 123
Origin: https://example.com
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
User-Agent: Some Random User Agent Never The Same
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: AllTheCOokiestuff
I can’t figure out where these requests are coming from. There’s probably 150 domains on this server and this is the only problem one.
