I’m running OpenLiteSpeed with a static (HTML) website. I have a 404.html page set inside OLS. Once a day (seems like a bot crawl), I get these errors, where various files are appended to the end:
2023-03-10 08:43:07.896716 [ERROR] [3470087] [172.70.100.46:38168:HTTP2-1] URI '/404.html/feed/' refers to a static file with PATH_INFO [/feed/].
2023-03-10 08:43:08.009344 [ERROR] [3470087] [172.70.100.115:45718:HTTP2-1] URI '/404.html/xmlrpc.php' refers to a static file with PATH_INFO [/xmlrpc.php].
2023-03-10 08:43:08.106873 [ERROR] [3470086] [108.162.216.54:11072:HTTP2-1] URI '/404.html/blog/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/blog/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.218950 [ERROR] [3470086] [108.162.216.13:27816:HTTP2-1] URI '/404.html/web/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/web/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.340127 [ERROR] [3470086] [172.70.100.30:48134:HTTP2-1] URI '/404.html/wordpress/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wordpress/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.432207 [ERROR] [3470087] [172.70.100.143:37736:HTTP2-1] URI '/404.html/wp/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wp/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.801887 [ERROR] [3470087] [108.162.216.213:55428:HTTP2-1] URI '/404.html/2020/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2020/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.877386 [ERROR] [3470087] [108.162.216.135:13422:HTTP2-1] URI '/404.html/2019/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2019/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.977300 [ERROR] [3470086] [172.70.100.138:59438:HTTP2-1] URI '/404.html/2021/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2021/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.153999 [ERROR] [3470087] [108.162.216.135:13422:HTTP2-3] URI '/404.html/shop/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/shop/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.310621 [ERROR] [3470087] [108.162.216.136:29768:HTTP2-1] URI '/404.html/wp1/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wp1/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.405351 [ERROR] [3470087] [172.70.100.166:11354:HTTP2-1] URI '/404.html/test/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/test/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.496381 [ERROR] [3470087] [108.162.216.65:31022:HTTP2-1] URI '/404.html/site/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/site/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.594522 [ERROR] [3470087] [108.162.216.121:49652:HTTP2-1] URI '/404.html/cms/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/cms/wp-includes/wlwmanifest.xml].
My question: Can a rule be written in CF that would prevent file appendages as shown in the code block? If so, how?
I would suggest to take a look at the set up and configuration of your backend (e.g. the framework(s) you use, OpenLiteSpeed, […]), and check how that the 404 thing is set up, as well as any kind of redirects you may have there.
Sometimes, a configuration thing supposed to hold e.g. “/404.html”, but that accidentally holds “/404.html/” (note the trailing slash) can do a lot of unexpected things.
According to the log, I’d believe the only thing going on between Cloudflare and your OpenLiteSpeed would be the actual request for e.g. https://example.com/blog/wp-includes/wlwmanifest.xml, which would then mean that Cloudflare wouldn’t be able to do anything.
Thanks for your response. I’ll unset and reset the custom 404 page pointer in OLS. Perhaps the trailing slash is the problem in the 404.html file itself. So I’ve changed the user-clickable URL from ‘/’ to an absolute URL to the home page. I’
I’m running OpenLiteSpeed with a static (HTML) website (No Wordpress). I have a 404.html page set inside OLS console. Once a day (seems like a bot crawl), I get these errors, where various files are appended to the end:
2023-03-10 08:43:07.896716 [ERROR] [3470087] [172.70.100.46:38168:HTTP2-1] URI '/404.html/feed/' refers to a static file with PATH_INFO [/feed/].
2023-03-10 08:43:08.009344 [ERROR] [3470087] [172.70.100.115:45718:HTTP2-1] URI '/404.html/xmlrpc.php' refers to a static file with PATH_INFO [/xmlrpc.php].
2023-03-10 08:43:08.106873 [ERROR] [3470086] [108.162.216.54:11072:HTTP2-1] URI '/404.html/blog/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/blog/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.218950 [ERROR] [3470086] [108.162.216.13:27816:HTTP2-1] URI '/404.html/web/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/web/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.340127 [ERROR] [3470086] [172.70.100.30:48134:HTTP2-1] URI '/404.html/wordpress/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wordpress/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.432207 [ERROR] [3470087] [172.70.100.143:37736:HTTP2-1] URI '/404.html/wp/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wp/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.801887 [ERROR] [3470087] [108.162.216.213:55428:HTTP2-1] URI '/404.html/2020/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2020/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.877386 [ERROR] [3470087] [108.162.216.135:13422:HTTP2-1] URI '/404.html/2019/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2019/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:08.977300 [ERROR] [3470086] [172.70.100.138:59438:HTTP2-1] URI '/404.html/2021/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/2021/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.153999 [ERROR] [3470087] [108.162.216.135:13422:HTTP2-3] URI '/404.html/shop/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/shop/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.310621 [ERROR] [3470087] [108.162.216.136:29768:HTTP2-1] URI '/404.html/wp1/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/wp1/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.405351 [ERROR] [3470087] [172.70.100.166:11354:HTTP2-1] URI '/404.html/test/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/test/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.496381 [ERROR] [3470087] [108.162.216.65:31022:HTTP2-1] URI '/404.html/site/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/site/wp-includes/wlwmanifest.xml].
2023-03-10 08:43:09.594522 [ERROR] [3470087] [108.162.216.121:49652:HTTP2-1] URI '/404.html/cms/wp-includes/wlwmanifest.xml' refers to a static file with PATH_INFO [/cms/wp-includes/wlwmanifest.xml].
The IP’s all appear to be from Cloudflare? Can I block these IPs, or would that create other problems?
I’ve checked all settings inside CF, and reviewed code. I have other WP sites on this server.
I kindly suggest you to avoid flooding the forum (or anywhere else) with multiple threads for the exact same thing.
No matter if were talking about multiple forum threads, or multiple support tickets, they will serve absolutely nothing good, but only just be delaying the possible resolution of your case even further.