01 · Operator
Who operates FindFiles.net
- Company
- FindFiles.net
- Official docs
- findfiles.net
02 · Behavior
What FindFiles.net does
The bot checks the availability of public files on the web, including files that users search for. It uses HTTP/2 HEAD requests and keeps at least 10 seconds between requests to the same server. It may download images, videos or executables for classification or virus scanning. FindFiles.net uses several user agents, such as FindFilesBot, a link checker and a favicon fetcher.
03 · Impact
Why FindFiles.net matters for your site
If you allow it
- Your public files can appear in FindFiles.net search
- Requests are rate-limited to one per 10 seconds per server
If you block it
- It may download large media or executable files
- It brings little traffic for most sites
04 · Allow
How to allow FindFiles.net
robots.txt
# FindFiles.net has no documented robots.txt token and does not read robots.txt.
# Use a Cloudflare, nginx or Apache rule instead.Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "FindFiles.net")
Action: Skip › All Super Bot Fight Mode rules
# Also check Security › Bots: "Block AI bots" can block it regardless of robots.txt.WordPress
# FindFiles.net has no documented robots.txt token and does not read robots.txt.
# Use a Cloudflare, nginx or Apache rule instead.nginx
# nginx serves every user agent by default.
# Make sure no rule like this blocks it:
# if ($http_user_agent ~* "FindFiles\.net") { return 403; }Apache
# Apache serves every user agent by default.
# Make sure .htaccess has no rule like this:
# RewriteCond %{HTTP_USER_AGENT} FindFiles\.net [NC]
# RewriteRule .* - [F,L]05 · Block
How to block FindFiles.net
Start with robots.txt. If FindFiles.net keeps showing up in your logs, block it at your CDN or web server.
robots.txt
# FindFiles.net has no documented robots.txt token and does not read robots.txt.
# Use a Cloudflare, nginx or Apache rule instead.Cloudflare
# Security › WAF › Custom rules › Create rule
Expression: (http.user_agent contains "FindFiles.net")
Action: BlockWordPress
# FindFiles.net has no documented robots.txt token and does not read robots.txt.
# Use a Cloudflare, nginx or Apache rule instead.nginx
# In your server { } block:
if ($http_user_agent ~* "FindFiles\.net") {
return 403;
}Apache
# .htaccess
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} FindFiles\.net [NC]
RewriteRule .* - [F,L]
</IfModule>06 · User agents
User agents we see for FindFiles.net
| User agent | Share | Last active | Status |
|---|---|---|---|
FindFiles.net/1.0 (compatible; +https://findfiles.net/bot) |
100% | 15 days ago | Unverified |
07 · Verification
Is it really FindFiles.net?
Anyone can copy a user agent. A reverse DNS lookup of a real request resolves to bot.findfiles.net, and that hostname resolves back to the same IP.
FAQ
Questions about FindFiles.net
What is FindFiles.net Bot?
It is the crawler of FindFiles.net. It checks whether publicly accessible files on the internet are available.
How do I verify FindFiles.net Bot?
Run a reverse DNS lookup on the IP and confirm it points to bot.findfiles.net. Then check that this hostname resolves back to the same IP.
Why does FindFiles.net download files from my site?
It may download images, videos or executables to classify them or scan them for viruses.
Last updated Oct 14, 2026