19 exploit-probe requests, each answered 403 between 2026-09-22T20:39:05Z and 2026-09-22T20:39:05Z.
...
show more19 exploit-probe requests, each answered 403 between 2026-09-22T20:39:05Z and 2026-09-22T20:39:05Z.
Signatures: server-script x18, wordpress x1
Paths: /1.php /nw.php /404.php /666.php /elp.php /alfa.php /edit.php /file.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403; 855 further requests refused after the ban between 202 ...
show more28 exploit-probe requests, each answered 403; 855 further requests refused after the ban between 2026-08-31T21:55:35Z and 2026-09-22T20:13:17Z.
Signatures: wordpress x20, server-script x8
Paths: / /wp-json/gravitysmtp/v1/tests/mock-data/ /wp/ /wordpress/ /wp/wp-json/batch/v1/ /blog/ /wordpress/wp-json/batch/v1/ /wp/index.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403; 338 further requests refused after the ban between 202 ...
show more19 exploit-probe requests, each answered 403; 338 further requests refused after the ban between 2026-08-31T20:50:00Z and 2026-09-22T19:29:17Z.
Signatures: wordpress x10, server-script x9
Paths: / /000.php /wp-content/about.php /wp-admin/css/admin.php /wp-content/plugins/fix/up.php /dex.php /abcd.php /file.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
155 exploit-probe requests, each answered 403; 74 requests over the 240/min ceiling, answered 429 be ...
show more155 exploit-probe requests, each answered 403; 74 requests over the 240/min ceiling, answered 429 between 2026-09-22T19:06:26Z and 2026-09-22T19:06:26Z.
Signatures: secret-file x91, credential-hunt x19, path-traversal x17, server-script x10, scanner-endpoint x8, ssrf x4
Paths: /.env /api/config/ /@fs/app/.env /@fs/src/.env /graphql/ /v1/graphql/ /api/graphql/ /i.php
User agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-09-22T17:50:31Z and 2026-09-22T17:50:31Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-09-22T17:50:31Z and 2026-09-22T17:50:31Z.
Signatures: server-script x20, wordpress x2
Paths: /1.php /7.php /w.php /0x.php /11.php /aa.php /222.php /404.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
24 exploit-probe requests, each answered 403 between 2026-09-22T17:39:19Z and 2026-09-22T17:39:19Z.
...
show more24 exploit-probe requests, each answered 403 between 2026-09-22T17:39:19Z and 2026-09-22T17:39:19Z.
Signatures: secret-file x22, credential-hunt x2
Paths: /.env /.env.local /.env.production /.env.development /js../.env /css../.env /dist../.env /@fs/app/.env
User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403; 18 further requests refused after the ban between 2026 ...
show more16 exploit-probe requests, each answered 403; 18 further requests refused after the ban between 2026-09-22T16:33:05Z and 2026-09-22T16:33:29Z.
Signatures: wordpress x11, server-script x5
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php /txets.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403; 70 further requests refused after the ban between 2026 ...
show more16 exploit-probe requests, each answered 403; 70 further requests refused after the ban between 2026-09-20T14:46:00Z and 2026-09-22T13:58:14Z.
Signatures: secret-file x14, server-script x2
Paths: /actuator/beans/ /actuator/heapdump/ /id_rsa/ /.aws/env/ /actuator/ /.git/HEAD/ /.ssh/id_rsa/ /actuator/env/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
25 exploit-probe requests, each answered 403 between 2026-09-22T14:48:38Z and 2026-09-22T14:48:38Z.
...
show more25 exploit-probe requests, each answered 403 between 2026-09-22T14:48:38Z and 2026-09-22T14:48:38Z.
Signatures: server-script x14, wordpress x11
Paths: /item.php /test.php /about.php /admin.php /goods.php /wp-admin/ /upload.php /worksec.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-09-03T13:21:22Z and 2026-09-22T12:58:00Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-09-03T13:21:22Z and 2026-09-22T12:58:00Z.
Signatures: wordpress x16, server-script x6
Paths: /wp-login.php /wp-signup.php /wp-activate.php /wp-admin/install.php /wp-admin/profile.php /wp-comments-post.php /wp-admin/user-new.php /wp-admin/
User agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 136 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 136 further requests refused after the ban between 2026-09-22T12:43:38Z and 2026-09-22T12:44:30Z.
Signatures: server-script x13, wordpress x1
Paths: /admin.php /wp-content/themes/index.php /2.php /k.php /w.php /01.php /ba.php /ccc.php
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403 between 2026-09-22T10:55:03Z and 2026-09-22T10:55:03Z.
...
show more16 exploit-probe requests, each answered 403 between 2026-09-22T10:55:03Z and 2026-09-22T10:55:03Z.
Signatures: secret-file x13, dump-file x3
Paths: /.ENV /.env /.env. /.env/ /.env.bak /.env.dev /.env.old /.env.prod
User agent: crusader-worker/1.0
Query strings omitted. Timestamp is the last hit observed.
show less
23 exploit-probe requests, each answered 403 between 2026-09-22T09:32:59Z and 2026-09-22T09:32:59Z.
...
show more23 exploit-probe requests, each answered 403 between 2026-09-22T09:32:59Z and 2026-09-22T09:32:59Z.
Signatures: server-script x15, wordpress x8
Paths: /w.php /css.php /elp.php /ahax.php /php8.php /admin.php /goods.php /shell.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403; 56 further requests refused after the ban between 2026 ...
show more28 exploit-probe requests, each answered 403; 56 further requests refused after the ban between 2026-09-21T08:00:20Z and 2026-09-22T08:19:24Z.
Signatures: server-script x18, wordpress x10
Paths: /1.php /heh.php /wso.php /abcd.php /file.php /shlo.php /about.php /admin.php
User agent: Go-http-client/1.1
Query strings omitted. Timestamp is the last hit observed.
show less
143 exploit-probe requests, each answered 403; 8 requests over the 240/min ceiling, answered 429; 26 ...
show more143 exploit-probe requests, each answered 403; 8 requests over the 240/min ceiling, answered 429; 260 further requests refused after the ban between 2026-09-17T13:37:35Z and 2026-09-22T08:23:02Z.
Signatures: secret-file x103, server-script x21, credential-hunt x9, dump-file x8, wordpress x2
Paths: / /.env /.env.qa /.env.aws /.env.bak /.env.dev /.env.old /.env.php
User agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403 between 2026-09-22T08:06:21Z and 2026-09-22T08:07:13Z.
...
show more13 exploit-probe requests, each answered 403 between 2026-09-22T08:06:21Z and 2026-09-22T08:07:13Z.
Signatures: server-script x12, wordpress x1
Paths: /admin.asp /admin.cgi /admin.jsp /admin.php /login.asp /login.jsp /login.php /admin.aspx
User agent: curl/8.7.1
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403 between 2026-09-22T08:04:21Z and 2026-09-22T08:04:21Z.
...
show more14 exploit-probe requests, each answered 403 between 2026-09-22T08:04:21Z and 2026-09-22T08:04:21Z.
Signatures: secret-file x14
Paths: /.env /.env.bak /.env.old /.env.save /.env.test /.env.local /.env.backup /.env.remote
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403 between 2026-09-21T22:15:09Z and 2026-09-21T22:15:09Z.
...
show more14 exploit-probe requests, each answered 403 between 2026-09-21T22:15:09Z and 2026-09-21T22:15:09Z.
Signatures: path-traversal x14
Paths: /%5C/ /blog%5C/ /contact%5C/ /stm-canna%5C/ /case-studies%5C/ /ferrantes-cafe%5C/ /cycrest-systems%5C/ /content-strategy%5C/
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
143 exploit-probe requests, each answered 403; 10 requests over the 240/min ceiling, answered 429 be ...
show more143 exploit-probe requests, each answered 403; 10 requests over the 240/min ceiling, answered 429 between 2026-09-21T20:07:59Z and 2026-09-21T20:07:59Z.
Signatures: secret-file x103, server-script x21, credential-hunt x9, dump-file x7, wordpress x3
Paths: /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.aws/.env /.env.dist
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
44 exploit-probe requests, each answered 403 between 2026-09-21T19:37:47Z and 2026-09-21T19:37:47Z.
...
show more44 exploit-probe requests, each answered 403 between 2026-09-21T19:37:47Z and 2026-09-21T19:37:47Z.
Signatures: secret-file x30, dump-file x10, server-script x4
Paths: /core/install.php /.env /.env.bak /.env.old /api/.env /app/.env /src/.env /web/.env
User agent: MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403; 270 further requests refused after the ban between 202 ...
show more19 exploit-probe requests, each answered 403; 270 further requests refused after the ban between 2026-08-31T20:50:00Z and 2026-09-21T18:20:02Z.
Signatures: wordpress x10, server-script x9
Paths: / /000.php /wp-content/about.php /wp-admin/css/admin.php /wp-content/plugins/fix/up.php /dex.php /abcd.php /file.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-08-30T16:33:44Z and 2026-09-21T17:43:24Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-08-30T16:33:44Z and 2026-09-21T17:43:24Z.
Signatures: wordpress x16, server-script x6
Paths: /wp-login.php /wp-signup.php /wp-activate.php /wp-admin/install.php /wp-admin/profile.php /wp-comments-post.php /wp-admin/user-new.php /wp-admin/
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403; 189 further requests refused after the ban between 202 ...
show more13 exploit-probe requests, each answered 403; 189 further requests refused after the ban between 2026-09-12T02:11:09Z and 2026-09-21T14:50:14Z.
Signatures: wordpress x8, server-script x5
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php /txets.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403; 1090 further requests refused after the ban between 20 ...
show more22 exploit-probe requests, each answered 403; 1090 further requests refused after the ban between 2026-08-30T21:58:55Z and 2026-09-21T14:03:18Z.
Signatures: wordpress x14, server-script x8
Paths: / /blog/ /wordpress/ /wp/ /blog/wp-json/batch/v1/ /wordpress/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp-json/gravitysmtp/v1/tests/mock-data/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403 between 2026-09-21T08:00:20Z and 2026-09-21T08:00:20Z.
...
show more28 exploit-probe requests, each answered 403 between 2026-09-21T08:00:20Z and 2026-09-21T08:00:20Z.
Signatures: server-script x18, wordpress x10
Paths: /1.php /heh.php /wso.php /abcd.php /file.php /shlo.php /about.php /admin.php
User agent: Go-http-client/1.1
Query strings omitted. Timestamp is the last hit observed.
show less
Brute-ForceBad Web BotWeb App Attack
By clicking βAccept allβ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.