Question: The site was receiving crawler traffic every hour from an inactive production subdomain, raising concerns that it might be malicious.
Answer: This is typically caused by bots crawling the subdomain because it is linked from the main marketing site. That behavior is common and does not necessarily indicate malicious activity. If the subdomain is unused, it can be removed.
Thread Attachments
Original Slack Thread
User U030U5PCXKQ: Have you guys seen this before ? want to make sure it is not malicious.
User U030U5PCXKQ: what is crawler traffic
User U030U5PCXKQ: I am just noticing the frequency ...every hour or so
User UBBJX2EHM: This is correct, this is a new feature in V# allowing sitemaps to be generated in FMS
User U030U5PCXKQ: also getting a lot of onApiCall ... early morning hours
User UBBJX2EHM: So these could be anything, like monitors, do you use the API web hook at all?
you can also get cluse from the inbox left side, state info
User U030U5PCXKQ: looks like I'm getting this traffic from Production Environment --<http://timecards.dsvail.com|timecards.dsvail.com> (which is not active , and I don't know why, when I configured that) ... it is a subdomain of mine, but with no traffic) .... I'm assuming I can remove this domain.
User UBBJX2EHM: Yes.
Since it’s linked off of a main marketing site, I suspect bots occasionally crawl it. This is pretty typical most marketing sites will still get hundreds of hits a day from various bots
User UBBJX2EHM: Note the
`errorCode: -1007`
- `Unknown service called: onSiteMap`
is becasue this is a new feature and not in your help file. it can safely be ignored.