Support » Plugin: Wordfence Security - Firewall & Malware Scan » Daily attempts to access non-existent files…

  • Resolved gore.m

    (@gorem)


    Hello,

    I noticed that I have daily attempts to access non-existent files, like:

    /.well-known/security.txt
    /linear-gradient(rgba(0,%25200,%25200,%25200.701961)%25200%25,%2520rgba(0,%25200,%25200,%25200)%2520100%25)
    /license.php
    /user/
    /apple-touch-icon-precomposed.png
    /apple-touch-icon.png

    Should I care about it? Is there an Wordfence option, to solve this problem?

    Thanks you

Viewing 4 replies - 1 through 4 (of 4 total)
  • This is common, you’ll get thousands of attempts… if you want to play around with blocking, use the “Block URLs” feature on the “All Options” page. My theory is that it’s good to spend some time with this, I keep a list that’s several hundred items long.

    Be careful what you block. For example, browsers looking for apple-tough-blah-blah are just looking for the Ios badges you can provide in your root directory. Google it up.

    MTN

    Thanks you @mountainguy2
    I did not notice “Block URLs” feature 🙂

    Hi @gorem,
    Since the files don’t exist, there isn’t really any need to block anything unless the requests are so frequent that you are running out of server resources or something like that.

    /.well-known/security.txt would be a file intended to be used for declaring security standards. It’s not a wildly accepted standard at this time afaik. If you search for the file you can find more information.

    /apple-touch-icon-precomposed.png and /apple-touch-icon.png are files that iPhones for example will be looking for automatically. Regular visitors could be requesting these so I would not recommend you block them.

    To sum up, before you block anything, do some research on the specific request, else you may end up blocking things you don’t want to block.

    Best of luck with your site for now!

    Thanks you @wfasa for you explanation .–)

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Daily attempts to access non-existent files…’ is closed to new replies.