20 exploit-probe requests, each answered 403 between 2026-09-14T15:00:58Z and 2026-09-14T15:00:58Z.
...
show more20 exploit-probe requests, each answered 403 between 2026-09-14T15:00:58Z and 2026-09-14T15:00:58Z.
Signatures: secret-file x20
Paths: /.env /.env.ci /.env.bak /.env.dev /.env.old /.env.live /.env.prod /.env.save
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
18 exploit-probe requests, each answered 403; 40 further requests refused after the ban between 2026 ...
show more18 exploit-probe requests, each answered 403; 40 further requests refused after the ban between 2026-09-01T20:40:17Z and 2026-09-14T09:32:05Z.
Signatures: wordpress x10, server-script x8
Paths: /wp-content/themes/seotheme/db.php / /wp-plain.php /wp-content/plugins/fix/up.php /alfacgiapi/perl.alfa /ALFA_DATA/alfacgiapi/perl.alfa /jutovlpr.php /oayplwof.php
User agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403; 555 further requests refused after the ban between 202 ...
show more22 exploit-probe requests, each answered 403; 555 further requests refused after the ban between 2026-09-12T10:41:58Z and 2026-09-14T09:33:19Z.
Signatures: server-script x19, wordpress x3
Paths: / /av.php /1.php /11.php /12.php /as.php /v4.php /dex.php
Query strings omitted. Timestamp is the last hit observed.
show less
26 exploit-probe requests, each answered 403; 148 further requests refused after the ban between 202 ...
show more26 exploit-probe requests, each answered 403; 148 further requests refused after the ban between 2026-09-14T09:23:49Z and 2026-09-14T09:23:54Z.
Signatures: secret-file x12, dump-file x9, server-script x3, credential-hunt x1, scanner-endpoint x1
Paths: /data.bak /dump.bak /dbdump.bak /debug/pprof/ /.golangci.yml /admin_dev.php /composer.json /composer.lock
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403; 124 further requests refused after the ban between 202 ...
show more19 exploit-probe requests, each answered 403; 124 further requests refused after the ban between 2026-08-31T20:50:00Z and 2026-09-14T06:33:35Z.
Signatures: wordpress x10, server-script x9
Paths: /wp-content/plugins/fix/up.php /wp-content/themes/seotheme/db.php /000.php /dex.php /abcd.php /file.php /bless.php /blurbs.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403 between 2026-09-14T03:53:07Z and 2026-09-14T03:53:07Z.
...
show more19 exploit-probe requests, each answered 403 between 2026-09-14T03:53:07Z and 2026-09-14T03:53:07Z.
Signatures: wordpress x14, server-script x5
Paths: /000.php /dex.php /abcd.php /bless.php /blurbs.php /wp-admin/index.php /wp-includes/hp2.php /wp-content/about.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
26 exploit-probe requests, each answered 403; 778 further requests refused after the ban between 202 ...
show more26 exploit-probe requests, each answered 403; 778 further requests refused after the ban between 2026-09-12T11:14:31Z and 2026-09-13T18:45:01Z.
Signatures: wordpress x18, server-script x8
Paths: / /wp/ /wordpress/ /blog/ /wordpress/wp-json/batch/v1/ /blog/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp/index.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
15 exploit-probe requests, each answered 403 between 2026-09-13T18:24:33Z and 2026-09-13T18:24:33Z.
...
show more15 exploit-probe requests, each answered 403 between 2026-09-13T18:24:33Z and 2026-09-13T18:24:33Z.
Signatures: wordpress x9, server-script x6
Paths: /app.php /num.php /rip.php /inputs.php /system_core.php /wp-content/test.php /.well-known/core.php /wp-content/users.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
15 exploit-probe requests, each answered 403; 6 further requests refused after the ban between 2026- ...
show more15 exploit-probe requests, each answered 403; 6 further requests refused after the ban between 2026-09-11T14:12:54Z and 2026-09-13T17:33:52Z.
Signatures: wordpress x12, server-script x3
Paths: / /wp-content/plugins/cidaas-pro-master/composer.json /images/images/cache.php /wp-json/newfold-sso/v1/ /wp-content/plugins/wp-content-filter/wp-content-filter.php /wp-content/plugins/super-forms/assets/css/backend/hints.css /wp-content/plugins/background-image-cropper/background-image-cropper.js /wp-content/plugins/yith-woocommerce-waiting-list-premium/plugin-fw/assets/css/admin.css
User agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 636 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 636 further requests refused after the ban between 2026-09-01T06:33:13Z and 2026-09-13T16:57:15Z.
Signatures: wordpress x9, server-script x5
Paths: / /wp/ /wp/wp-json/batch/v1/ /wp/index.php /wordpress/ /wordpress/wp-json/batch/v1/ /wp/wp-json/Batch/v1/ /wp/blog/wp-json/batch/v1/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403; 284 further requests refused after the ban between 202 ...
show more22 exploit-probe requests, each answered 403; 284 further requests refused after the ban between 2026-09-12T07:48:10Z and 2026-09-13T16:35:12Z.
Signatures: server-script x21, wordpress x1
Paths: / /1.php /8.php /k.php /b8.php /k2.php /222.php /aaa.php
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403; 109 further requests refused after the ban between 202 ...
show more12 exploit-probe requests, each answered 403; 109 further requests refused after the ban between 2026-09-13T15:48:47Z and 2026-09-13T16:00:05Z.
Signatures: secret-file x9, dump-file x2, credential-hunt x1
Paths: /.git/ /.env_sample /.git/config/ /.git-credentials /.gem/credentials/ /.boto /api/.env /azure.json
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
61 exploit-probe requests, each answered 403 between 2026-09-13T15:28:09Z and 2026-09-13T15:28:09Z.
...
show more61 exploit-probe requests, each answered 403 between 2026-09-13T15:28:09Z and 2026-09-13T15:28:09Z.
Signatures: secret-file x38, credential-hunt x10, path-traversal x9, dev-server x3, wordpress x1
Paths: /.env /userfiles/ /proc/self/environ/ /.env.local /.env.development /api/proc/self/environ/ /userfiles/x/ /.env.production
User agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Query strings omitted. Timestamp is the last hit observed.
show less
46 exploit-probe requests, each answered 403; 195 further requests refused after the ban between 202 ...
show more46 exploit-probe requests, each answered 403; 195 further requests refused after the ban between 2026-08-31T01:31:24Z and 2026-09-13T15:17:29Z.
Signatures: wordpress x28, server-script x18
Paths: /wp-admin/index.php /wp-content/index.php /a.php /simple.php /worksec.php /.tmb/worksec.php /wp-admin/js/index.php /wp-admin/css/index.php
User agent: Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403 between 2026-09-01T19:34:15Z and 2026-09-13T11:03:11Z.
...
show more14 exploit-probe requests, each answered 403 between 2026-09-01T19:34:15Z and 2026-09-13T11:03:11Z.
Signatures: wordpress x14
Paths: /wp-json/ /wp-login.php /robots.txt /xmlrpc.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403 between 2026-08-29T21:40:16Z and 2026-09-13T10:31:41Z.
...
show more12 exploit-probe requests, each answered 403 between 2026-08-29T21:40:16Z and 2026-09-13T10:31:41Z.
Signatures: wordpress x8, server-script x4
Paths: /wp-login.php /wp-admin/ /images/images/cache.php /assets/images/images/cache.php /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php /images/images/images/images/images/images/images/images/cache.php
User agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403 between 2026-08-30T13:32:44Z and 2026-09-13T07:50:34Z.
...
show more12 exploit-probe requests, each answered 403 between 2026-08-30T13:32:44Z and 2026-09-13T07:50:34Z.
Signatures: server-script x8, wordpress x4
Paths: /mah.php /min.php /admin.php /fleen.php /ultra.php /kurtlar.php /ultra-enc.php /autoload_classmap.php
User agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403; 1646 further requests refused after the ban between 20 ...
show more28 exploit-probe requests, each answered 403; 1646 further requests refused after the ban between 2026-08-31T00:31:21Z and 2026-09-13T05:42:50Z.
Signatures: wordpress x20, server-script x8
Paths: / /blog/ /wordpress/ /wp/ /blog/wp-json/batch/v1/ /wordpress/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp/index.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
15 exploit-probe requests, each answered 403 between 2026-09-12T12:08:53Z and 2026-09-13T05:44:07Z.
...
show more15 exploit-probe requests, each answered 403 between 2026-09-12T12:08:53Z and 2026-09-13T05:44:07Z.
Signatures: wordpress x9, server-script x6
Paths: /wp-content/themes/seotheme/db.php /wp-plain.php /wp-content/plugins/fix/up.php /ckseqztv.php /paxnjlev.php /wohcfyra.php
User agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403; 97 further requests refused after the ban between 2026 ...
show more19 exploit-probe requests, each answered 403; 97 further requests refused after the ban between 2026-08-31T20:50:00Z and 2026-09-13T04:48:18Z.
Signatures: wordpress x10, server-script x9
Paths: /wp-content/themes/seotheme/db.php /wp-plain.php /wp-content/plugins/fix/up.php /000.php /dex.php /abcd.php /file.php /bless.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403; 809 further requests refused after the ban between 202 ...
show more13 exploit-probe requests, each answered 403; 809 further requests refused after the ban between 2026-09-11T21:55:49Z and 2026-09-13T04:38:37Z.
Signatures: wordpress x8, server-script x5
Paths: / /wordpress/ /wp/ /blog/ /blog/wp-json/batch/v1/ /wordpress/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp-json/batch/v1/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403; 77 further requests refused after the ban between 2026 ...
show more16 exploit-probe requests, each answered 403; 77 further requests refused after the ban between 2026-08-30T11:58:31Z and 2026-09-13T00:04:14Z.
Signatures: wordpress x11, server-script x5
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /blurbs.php /ioxi-o.php /wp-mail.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
83 exploit-probe requests, each answered 403 between 2026-09-12T21:30:11Z and 2026-09-12T21:30:11Z.
...
show more83 exploit-probe requests, each answered 403 between 2026-09-12T21:30:11Z and 2026-09-12T21:30:11Z.
Signatures: secret-file x54, credential-hunt x10, path-traversal x9, ssrf x4, dev-server x3, dump-file x2
Paths: /.env /@fs/.env /userfiles/ /proc/self/environ/ /__vite_rsc_findSourceMapURL/ /.env.local /.env.development /api/proc/self/environ/
User agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Query strings omitted. Timestamp is the last hit observed.
show less
15 exploit-probe requests, each answered 403; 251 further requests refused after the ban between 202 ...
show more15 exploit-probe requests, each answered 403; 251 further requests refused after the ban between 2026-09-12T17:03:26Z and 2026-09-12T17:04:44Z.
Signatures: secret-file x14, server-script x1
Paths: /.env /.env1 /.env2 /.env~ /.env.ci /.env.bak /.env.dev /.env.old
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
23 exploit-probe requests, each answered 403; 2032 further requests refused after the ban between 20 ...
show more23 exploit-probe requests, each answered 403; 2032 further requests refused after the ban between 2026-09-12T15:18:09Z and 2026-09-12T15:25:19Z.
Signatures: wordpress x23
Paths: /wp-login.php / /wp-json/wp/v2/users/ /index.php/wp-json/wp/v2/users/
User agent: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
Brute-ForceBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.