• Resolved 0xE000

    (@elten)


    hi,I found some people visiting https://abc.com/?_wfsf=detectProxy. What is this address? Will it expose important information? Thank u very much

    Ps: I am a Chinese user, if you can not read, I attach the Chinese, if you have time, you can translate the Chinese. Thank you.

    我发现有一些人在访问 https://abc.com/?_wfsf=detectProxy . 目前它显示为 0 ,这是什么地址?它会暴露重要信息吗?非常感谢回复。

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter 0xE000

    (@elten)

    https://www.examples.com/?_wfsf=detectProxy Is it safe?

    ?_wfsf=detectProxy Can i hide it?

    Hi,
    That should be a POST request initialized by the scan when checking for “the most secure way to get IPs”, although it will not expose any infromation about your site, it’s not normal to see these requests in the “Live Traffic” I assume? or did you see these requests in the server access log?

    Thanks.

    Thread Starter 0xE000

    (@elten)

    @wfalaa

    Yes, in my access log, every day someone will scan https://www.examples.com/?_wfsf=detectProxy this address, I feel it is not normal browsing. I do not know what these people are scanning for it? I just guess if it will have some security problems. thank you very much.

    If it’s something like this:
    [IP] - [DATE & TIME] "POST /?_wfsf=detectProxy HTTP/1.1" 200 282 "-" "USERAGENT"
    Then that’s totally fine, it’s the scan checking for “the most secure way to get IPs”, it will be a little bit strange if it’s a GET request instead of POST, unless you can share some more details about this entry?

    Thanks.

    Hello!

    I hope we were successful in helping you resolve your issue with Wordfence! Since we have not heard back from you in the past 2 weeks I will now be marking this support thread as resolved. However, if we still haven’t resolved your issue please reach out to us as we would be more than happy to further assist you!

    Thanks and have a great day!
    Chloe

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘What is this ?_wfsf = detectProxy’ is closed to new replies.