12 exploit-probe requests, each answered 403 between 2026-10-20T13:54:25Z and 2026-10-20T15:41:49Z.
...
show more12 exploit-probe requests, each answered 403 between 2026-10-20T13:54:25Z and 2026-10-20T15:41:49Z.
Signatures: server-script x12
Paths: /w.php /admin.php /vn.php /file.php /php8.php /file5.php /shell.php /file17.php
User agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
23 exploit-probe requests, each answered 403; 417 further requests refused after the ban between 202 ...
show more23 exploit-probe requests, each answered 403; 417 further requests refused after the ban between 2026-10-13T04:32:54Z and 2026-10-20T13:09:10Z.
Signatures: server-script x19, wordpress x4
Paths: /1111.php /wp-file.php /wp-includes/admin.php /wp-admin/css/admin.php /a.php /c.php /f.php /w.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403 between 2026-10-20T13:11:50Z and 2026-10-20T13:12:29Z.
...
show more21 exploit-probe requests, each answered 403 between 2026-10-20T13:11:50Z and 2026-10-20T13:12:29Z.
Signatures: secret-file x17, server-script x2, dump-file x1, credential-hunt x1
Paths: /.env /.env.bak /API/.env /api/.env /app/.env /dev/.env /phpinfo/ /site.zip
User agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; nb-NO; rv:[ip]) Gecko/20100611 Firefox/3.6.4 (.NET CLR 3.5.30729)
Query strings omitted. Timestamp is the last hit observed.
show less
76 exploit-probe requests, each answered 403; 112 further requests refused after the ban between 202 ...
show more76 exploit-probe requests, each answered 403; 112 further requests refused after the ban between 2026-10-18T16:28:47Z and 2026-10-20T12:14:41Z.
Signatures: secret-file x65, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: / /.env /.env.bak /.env.swp /.aws/.env /.env.local /.env.backup /.env.sample
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 210 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 210 further requests refused after the ban between 2026-10-17T06:52:00Z and 2026-10-19T22:15:38Z.
Signatures: server-script x13, wordpress x1
Paths: /admin.php /1.php /2.php /8.php /k.php /w.php /aa.php /g1.php
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403 between 2026-10-19T21:51:39Z and 2026-10-19T21:51:39Z.
...
show more13 exploit-probe requests, each answered 403 between 2026-10-19T21:51:39Z and 2026-10-19T21:51:39Z.
Signatures: server-script x11, secret-file x2
Paths: /pma/ /phpmyadmin/ /adminer/ /.git/HEAD/ /phpMyAdmin/ /adminer/adminer.php /sql/ /dbadmin/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-10-19T21:38:55Z and 2026-10-19T21:38:55Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-10-19T21:38:55Z and 2026-10-19T21:38:55Z.
Signatures: server-script x21, wordpress x1
Paths: /a.php /eew.php /json.php /menu.php /amaxx.php /cache.php /error.php /index.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
20 exploit-probe requests, each answered 403 between 2026-10-19T20:21:37Z and 2026-10-19T20:21:37Z.
...
show more20 exploit-probe requests, each answered 403 between 2026-10-19T20:21:37Z and 2026-10-19T20:21:37Z.
Signatures: server-script x19, wordpress x1
Paths: /admin.php /1.php /13.php /aa.php /ae.php /cc.php /222.php /bak.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
72 exploit-probe requests, each answered 403 between 2026-10-19T20:18:57Z and 2026-10-19T20:18:57Z.
...
show more72 exploit-probe requests, each answered 403 between 2026-10-19T20:18:57Z and 2026-10-19T20:18:57Z.
Signatures: secret-file x61, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: /.env /.env.bak /.env.swp /api/.env /app/.env /dev/.env /info.php /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
20 exploit-probe requests, each answered 403 between 2026-10-19T19:58:53Z and 2026-10-19T19:58:53Z.
...
show more20 exploit-probe requests, each answered 403 between 2026-10-19T19:58:53Z and 2026-10-19T19:58:53Z.
Signatures: server-script x16, wordpress x4
Paths: /an.php /ws.php /404.php /abc.php /rip.php /abcd.php /admin.php /cache.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 328 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 328 further requests refused after the ban between 2026-09-27T22:29:53Z and 2026-10-19T19:10:24Z.
Signatures: wordpress x10, server-script x4
Paths: /000.php /wp-content/about.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
38 exploit-probe requests, each answered 403 between 2026-10-19T18:13:55Z and 2026-10-19T18:13:55Z.
...
show more38 exploit-probe requests, each answered 403 between 2026-10-19T18:13:55Z and 2026-10-19T18:13:55Z.
Signatures: secret-file x27, dump-file x10, server-script x1
Paths: /core/install.php /.env /.env.bak /.env.old /api/.env /app/.env /src/.env /web/.env
User agent: MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)
Query strings omitted. Timestamp is the last hit observed.
show less
26 exploit-probe requests, each answered 403 between 2026-10-19T14:37:56Z and 2026-10-19T14:37:56Z.
...
show more26 exploit-probe requests, each answered 403 between 2026-10-19T14:37:56Z and 2026-10-19T14:37:56Z.
Signatures: wordpress x23, server-script x3
Paths: /wp-includes/images/ /wp-includes/block-patterns/ /wordpress/wp-includes/js/mediaelement/renderers/ /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ /map.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
74 exploit-probe requests, each answered 403 between 2026-10-19T08:47:51Z and 2026-10-19T08:47:51Z.
...
show more74 exploit-probe requests, each answered 403 between 2026-10-19T08:47:51Z and 2026-10-19T08:47:51Z.
Signatures: secret-file x63, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.env.swp /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403 between 2026-10-19T05:35:52Z and 2026-10-19T05:36:17Z.
...
show more13 exploit-probe requests, each answered 403 between 2026-10-19T05:35:52Z and 2026-10-19T05:36:17Z.
Signatures: secret-file x8, credential-hunt x4, server-script x1
Paths: /app/.env /web/.env /.mcp.json /config/.env /phpinfo.php /secrets.toml /.cursor/mcp.json /.vscode/mcp.json
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
110 exploit-probe requests, each answered 403; 991 further requests refused after the ban between 20 ...
show more110 exploit-probe requests, each answered 403; 991 further requests refused after the ban between 2026-09-01T01:30:11Z and 2026-10-19T04:49:34Z.
Signatures: secret-file x98, credential-hunt x6, server-script x5, path-traversal x1
Paths: / /.env /.env.bak /.env.dev /.env.old /.env.swp /.env.prod /.env.local
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403; 24 further requests refused after the ban between 2026 ...
show more12 exploit-probe requests, each answered 403; 24 further requests refused after the ban between 2026-10-16T20:33:42Z and 2026-10-18T22:14:27Z.
Signatures: wordpress x8, server-script x4
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php /txets.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
17 exploit-probe requests, each answered 403; 207 further requests refused after the ban between 202 ...
show more17 exploit-probe requests, each answered 403; 207 further requests refused after the ban between 2026-10-17T03:38:26Z and 2026-10-18T17:05:56Z.
Signatures: server-script x16, wordpress x1
Paths: /admin.php /1.php /2.php /8.php /k.php /w.php /aa.php /g1.php
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 381 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 381 further requests refused after the ban between 2026-10-15T07:27:18Z and 2026-10-18T16:37:24Z.
Signatures: server-script x13, wordpress x1
Paths: /admin.php /1.php /2.php /8.php /k.php /w.php /aa.php /g1.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
75 exploit-probe requests, each answered 403 between 2026-10-18T16:28:47Z and 2026-10-18T16:28:47Z.
...
show more75 exploit-probe requests, each answered 403 between 2026-10-18T16:28:47Z and 2026-10-18T16:28:47Z.
Signatures: secret-file x64, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.env.swp /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
18 exploit-probe requests, each answered 403; 750 further requests refused after the ban between 202 ...
show more18 exploit-probe requests, each answered 403; 750 further requests refused after the ban between 2026-10-12T13:55:52Z and 2026-10-18T15:59:46Z.
Signatures: server-script x13, wordpress x5
Paths: /vendor/ /wp-admin/network/ /wp-content/themes/ /wp-includes/js/crop/ /wp-includes/php-compat/ /wp-includes/block-bindings/ /01.php /lv.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403; 431 further requests refused after the ban between 202 ...
show more21 exploit-probe requests, each answered 403; 431 further requests refused after the ban between 2026-10-13T15:38:50Z and 2026-10-18T13:14:59Z.
Signatures: server-script x20, wordpress x1
Paths: /admin.php /wp-content/themes/index.php /1ac.php /wp-logis.php /wp-trbacks.php /this_is_a_new_hello_world.php /2.php /k.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 292 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 292 further requests refused after the ban between 2026-09-27T22:29:53Z and 2026-10-18T07:04:19Z.
Signatures: wordpress x10, server-script x4
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php /txets.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403 between 2026-10-18T03:52:29Z and 2026-10-18T03:52:29Z.
...
show more16 exploit-probe requests, each answered 403 between 2026-10-18T03:52:29Z and 2026-10-18T03:52:29Z.
Signatures: secret-file x13, dump-file x1, server-script x1, scanner-endpoint x1
Paths: /.env /wp-config.php /appsettings.json /.git/reconx-775fe7647de1/ /.svn/reconx-3e86d8024c75/ /.git.bak/reconx-b5c1d23f70be/ /old/.git/reconx-814efe024869/ /html/.git/reconx-a59af2a5b72e/
User agent: curl/8.6.0
Query strings omitted. Timestamp is the last hit observed.
show less
144 exploit-probe requests, each answered 403; 6 requests over the 240/min ceiling, answered 429; 35 ...
show more144 exploit-probe requests, each answered 403; 6 requests over the 240/min ceiling, answered 429; 354 further requests refused after the ban between 2026-09-20T02:15:28Z and 2026-10-18T00:49:49Z.
Signatures: secret-file x104, server-script x21, credential-hunt x9, dump-file x8, wordpress x2
Paths: / /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Query strings omitted. Timestamp is the last hit observed.
show less
DDoS AttackHackingBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.