islp

I downloaded it from Envato Market. I tried to contact the author but I received no answer, maybe because I need to purchase extended support. Anyway, the theme was last updated more than one year ago.

@wfalaa

I ran a new scan and found anything was fixed. ??

Thanks to this issue, I noticed my ARForms plugin needed an update. ??

@reputeinfosystems

as I said, I checked for the presence of @$_COOKIE in the original files and found it was there, so I thought it was a Wordfence issue

Hello, the plugin is ARForms, it is not free and as far ad I know it is not in the official repository

Ok.

I want to add another thing: if they scanned the entire website, I would read this traffic through Wordfence, but the bot directly points new files. This is really puzzling me: at some level, I can’t find where, I’m suspecting plugins, there must be something informing the bot someone accesses web pages, I must admit people disappearing in The Leftovers series are far more explainable

Hi, I sent a ticket, they asked me for my domain: I’m still waiting for a reply. And the bot keeps coming, apparently ignoring my robots.txt.

Hi, of course I know what bots do, but it’s very strange a bot looks for 2 non-existing files even 2 minutes after the creation of the files: how do they know the name of the file? How do they know the directory? And why they look for files that are not built-in in WP?

Another very strange thing is the following: the bot crawls a particular page just after a real user has visited the same page. The website is quite large, the bot could visit any other page: why *that* page?

I sent a mail to Embed.ly and they asked to tell them the URL of the website: I did it but I received no further reply.

Last but not least, even if I blocked it the way you suggest, the bot ignores the robots.txt.