Title: Still not blocking
Last modified: May 3, 2017

---

# Still not blocking

 *  Resolved [Martin1](https://wordpress.org/support/users/martin1/)
 * (@martin1)
 * [9 years ago](https://wordpress.org/support/topic/still-not-blocking/)
 * Hi,
 * I don’t understand. I have it set to block every country except the Netherlands
   and Denmark but I just got a warning from WordFence stating:
 * The Wordfence Web Application Firewall has blocked 100 attacks over the last 
   10 minutes. Below is a sample of these recent attacks:
 * May 3, 2017 1:55pm 95.24.35.196 (Russian Federation) Blocked for Directory Traversal–
   wp-config.php in query string: fname=../../wp-config.php
    May 3, 2017 1:55pm 
   95.24.35.196 (Russian Federation) Blocked for Directory Traversal – wp-config.
   php in query string: file=../../../wp-config.php May 3, 2017 1:55pm 95.24.35.196(
   Russian Federation) Blocked for Directory Traversal – wp-config.php in query 
   string: download=../../../wp-config.php May 3, 2017 1:54pm 95.24.35.196 (Russian
   Federation) Blocked for Directory Traversal – wp-config.php in query string: 
   download=../../../../wp-config.php May 3, 2017 1:54pm 95.24.35.196 (Russian Federation)
   Blocked for Directory Traversal – wp-config.php in query string: file=../../../
   wp-config.php May 3, 2017 1:54pm 95.24.35.196 (Russian Federation) Blocked for
   Directory Traversal – wp-config.php in query string: file=./wp-config.php May
   3, 2017 1:54pm 95.24.35.196 (Russian Federation) Blocked for Directory Traversal–
   wp-config.php in query string: file=../../../../../wp-config.php May 3, 2017 
   1:54pm 95.24.35.196 (Russian Federation) Blocked for Directory Traversal – wp-
   config.php in query string: file=../../../../../wp-config.php May 3, 2017 1:54pm
   95.24.35.196 (Russian Federation) Blocked for Directory Traversal – wp-config.
   php in query string: filename=../../../../../wp-config.php May 3, 2017 1:54pm
   95.24.35.196 (Russian Federation) Blocked for Directory Traversal – wp-config.
   php in query string: file=../../../../../wp-config.php
 * Why is iQ Block Country not blocking the Russian Federation?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Pascal](https://wordpress.org/support/users/iqpascal/)
 * (@iqpascal)
 * [9 years ago](https://wordpress.org/support/topic/still-not-blocking/#post-9114302)
 * Because wp-config.php is not an actual page or post it can block.
 * Under normal circumstances requesting wp-config.php will show an empty page.
 * Apparently WordFence is blocking it. You could say so should iQ Block Country
   if you block the backend. For now it is not.
 *  Thread Starter [Martin1](https://wordpress.org/support/users/martin1/)
 * (@martin1)
 * [9 years ago](https://wordpress.org/support/topic/still-not-blocking/#post-9119072)
 * Hi,
 * I didn’t quit understand what you meant here:
 * “Apparently WordFence is blocking it. You could say so should iQ Block Country
   if you block the backend. For now it is not.”
 * WordFence just alerted me that at this moment, there is again an increased attack
   rate from the Russian federation.
 * What do I need to do to keep them away? Block the front end as well? I have currently
   only blocked everyone from the backend.
    -  This reply was modified 9 years ago by [Martin1](https://wordpress.org/support/users/martin1/).
 *  Plugin Author [Pascal](https://wordpress.org/support/users/iqpascal/)
 * (@iqpascal)
 * [8 years, 10 months ago](https://wordpress.org/support/topic/still-not-blocking/#post-9241260)
 * iQ Block Country does not check for urls like “../../../wp-config.php or wp-config.
   php at all. If you’ve done a normal installation anybody who tries to get wp-
   config.php will receive a blank page.
 * This plugin is designed to keep people away from either your backend, (part of)
   your frontend, or both. It’s not a real security plugin as WordFence is for instance.
   It will not check for file permissions or whatever security plugins can and should
   do. It is designed to keep your content from certain countries, or disallow them
   to retrieve the page so they can leave spam comments etc.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Still not blocking’ is closed to new replies.

 * ![](https://ps.w.org/iq-block-country/assets/icon-128x128.png?rev=3136019)
 * [iQ Block Country](https://wordpress.org/plugins/iq-block-country/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/iq-block-country/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/iq-block-country/)
 * [Active Topics](https://wordpress.org/support/plugin/iq-block-country/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/iq-block-country/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/iq-block-country/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [Pascal](https://wordpress.org/support/users/iqpascal/)
 * Last activity: [8 years, 10 months ago](https://wordpress.org/support/topic/still-not-blocking/#post-9241260)
 * Status: resolved