Renaming wp-config.php ??

“wp-admin/admin-ajax.php?action=revslider_show_image&img=.”

That’s a common attempt to exploit a vulnerability in an particular version of a popular Slider plugin.

A quick explanation of what you’re seeing in your logs, and whether or not it could affect you: https://wptavern.com/critical-security-vulnerability-found-in-wordpress-slider-revolution-plugin-immediate-update-advised

Thanks for advising about the exploit. I don’t have that plugin, however there may be weaknesses in the plugins I do have, or in WP core itself, to display wp-config.php

I think the best solution for me is to rename the file.

Renaming the configuration file will cause your site to fail. Proper permissions – and if you like – properly moving the file and -or- denying access , is all that’s usually required.

[edit] just an afterthought: a grep on the WordPress archive shows roughly 21 php files that contain ~76 references to wp-config.php. I’m sure some of those references are commented, but you can easily see the issue with editing core files.

Well, I don’t know how I got only 4 references; there are roughly 21 as you say.

Will do the .htaccess tip, lower the perms to 400 or 440 (444 now), and think about moving it outside the web root path. Thanks