13 exploit-probe requests, each answered 403 between 2026-10-26T02:30:25Z and 2026-10-26T02:31:02Z.
...
show more13 exploit-probe requests, each answered 403 between 2026-10-26T02:30:25Z and 2026-10-26T02:31:02Z.
Signatures: secret-file x13
Paths: /.env /.netrc /.npmrc /.env.dev /.env.old /.env.local /.env.backup /.env.staging
User agent: Mozilla/5.0 (iPhone; CPU iPhone OS 26_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 462 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 462 further requests refused after the ban between 2026-09-27T22:29:53Z and 2026-10-26T02:06:43Z.
Signatures: wordpress x10, server-script x4
Paths: /000.php /dex.php /abcd.php /file.php /bless.php /lufix.php /style.php /txets.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
43 exploit-probe requests, each answered 403; 16 further requests refused after the ban between 2026 ...
show more43 exploit-probe requests, each answered 403; 16 further requests refused after the ban between 2026-09-07T19:26:06Z and 2026-10-26T00:12:09Z.
Signatures: secret-file x33, server-script x8, scanner-endpoint x2
Paths: /.git/config/ /.env /i.php /.netrc /.npmrc /pi.php /.env.bak /.env.dev
User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
20 exploit-probe requests, each answered 403 between 2026-10-26T00:03:06Z and 2026-10-26T00:03:06Z.
...
show more20 exploit-probe requests, each answered 403 between 2026-10-26T00:03:06Z and 2026-10-26T00:03:06Z.
Signatures: server-script x17, wordpress x3
Paths: /0.php /1.php /ai.php /222.php /403.php /xl9.php /php8.php /admin.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403 between 2026-10-25T23:30:38Z and 2026-10-25T23:30:38Z.
...
show more19 exploit-probe requests, each answered 403 between 2026-10-25T23:30:38Z and 2026-10-25T23:30:38Z.
Signatures: server-script x15, wordpress x4
Paths: /an.php /ws.php /404.php /abc.php /rip.php /admin.php /cache.php /inputs.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403 between 2026-10-19T21:47:20Z and 2026-10-25T19:35:14Z.
...
show more16 exploit-probe requests, each answered 403 between 2026-10-19T21:47:20Z and 2026-10-25T19:35:14Z.
Signatures: wordpress x16
Paths: /wp-admin/admin-ajax.php /wp-content/plugins/duplicator/download.php /wp-json/batch/v1/ /wp-json/batch/v1/wp-json/batch/v1/ /wp-content/plugins/backup-backup/temp/
User agent: Mozilla/5.0
Query strings omitted. Timestamp is the last hit observed.
show less
16 exploit-probe requests, each answered 403; 280 further requests refused after the ban between 202 ...
show more16 exploit-probe requests, each answered 403; 280 further requests refused after the ban between 2026-10-25T08:06:25Z and 2026-10-25T16:36:13Z.
Signatures: wordpress x16
Paths: / /blog/ /app/ /cms/ /news/ /press/ /site/ /wp/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
17 exploit-probe requests, each answered 403; 72 further requests refused after the ban between 2026 ...
show more17 exploit-probe requests, each answered 403; 72 further requests refused after the ban between 2026-10-25T15:26:11Z and 2026-10-25T15:27:16Z.
Signatures: server-script x16, wordpress x1
Paths: /opsh.php /admin.php /y.php /b8.php /hh.php /add.php /ana.php /ano.php
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403; 21 further requests refused after the ban between 2026 ...
show more12 exploit-probe requests, each answered 403; 21 further requests refused after the ban between 2026-09-02T02:29:42Z and 2026-10-25T08:06:41Z.
Signatures: wordpress x8, server-script x4
Paths: / /wp-admin/admin-ajax.php /wp-login.php /wp-admin/ /wp-signup.php /wp-activate.php /wp-links-opml.php /wp-admin/install.php
User agent: Mozilla/5.0
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403 between 2026-10-25T07:18:50Z and 2026-10-25T07:18:50Z.
...
show more28 exploit-probe requests, each answered 403 between 2026-10-25T07:18:50Z and 2026-10-25T07:18:50Z.
Signatures: server-script x17, wordpress x11
Paths: /admin.php /goods.php /wp-atom.php /adminfuns.php /3PJcpMFsD8B.php /wp-includes/core.php /wp-content/plugins/pwnd/pwnd.php /item.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
25 exploit-probe requests, each answered 403; 31 further requests refused after the ban between 2026 ...
show more25 exploit-probe requests, each answered 403; 31 further requests refused after the ban between 2026-09-16T15:36:09Z and 2026-10-25T05:06:12Z.
Signatures: server-script x20, secret-file x4, dump-file x1
Paths: / /.env /i.php /pi.php /.env.bak /pinfo.php /php_version.php /server-info.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
128 exploit-probe requests, each answered 403; 335 further requests refused after the ban between 20 ...
show more128 exploit-probe requests, each answered 403; 335 further requests refused after the ban between 2026-10-23T02:40:30Z and 2026-10-25T04:59:15Z.
Signatures: secret-file x112, dump-file x12, server-script x4
Paths: /_ignition/execute-solution/ /env/ /.env~ /db.sqlite /app.sqlite /.env.docker /.env.remote /data.sqlite
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:151.0) Gecko/20100101 Firefox/151.0
Query strings omitted. Timestamp is the last hit observed.
show less
33 exploit-probe requests, each answered 403; 189 further requests refused after the ban between 202 ...
show more33 exploit-probe requests, each answered 403; 189 further requests refused after the ban between 2026-10-12T17:35:52Z and 2026-10-25T04:27:52Z.
Signatures: server-script x33
Paths: /admin.php /1.php /8.php /a.php /222.php /bnmtp.php /Component.php /adminfuns.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
31 exploit-probe requests, each answered 403 between 2026-10-25T02:53:25Z and 2026-10-25T02:53:25Z.
...
show more31 exploit-probe requests, each answered 403 between 2026-10-25T02:53:25Z and 2026-10-25T02:53:25Z.
Signatures: server-script x26, wordpress x5
Paths: /an.php /as.php /sf.php /ws.php /404.php /abc.php /rip.php /abcd.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403; 147 further requests refused after the ban between 202 ...
show more28 exploit-probe requests, each answered 403; 147 further requests refused after the ban between 2026-10-15T11:51:41Z and 2026-10-24T23:42:12Z.
Signatures: wordpress x20, server-script x8
Paths: /wp-content/plugins/fix/up.php /000.php /dex.php /abcd.php /file.php /bless.php /style.php /blurbs.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
23 exploit-probe requests, each answered 403; 49 further requests refused after the ban between 2026 ...
show more23 exploit-probe requests, each answered 403; 49 further requests refused after the ban between 2026-10-24T22:56:27Z and 2026-10-24T22:56:58Z.
Signatures: secret-file x23
Paths: /web.config /.env.backup /.aws/config/ /.env.example /.git/config/ /aws-credentials/ /.aws/credentials/ /%22/_next/static/chunks/099mzf_i3m06k.js%22
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403; 33 further requests refused after the ban between 2026 ...
show more22 exploit-probe requests, each answered 403; 33 further requests refused after the ban between 2026-10-23T22:10:56Z and 2026-10-24T21:00:17Z.
Signatures: server-script x19, wordpress x3
Paths: /1.php /ai.php /sm.php /222.php /403.php /dsa.php /min.php /xl9.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403 between 2026-10-24T20:12:34Z and 2026-10-24T20:12:34Z.
...
show more14 exploit-probe requests, each answered 403 between 2026-10-24T20:12:34Z and 2026-10-24T20:12:34Z.
Signatures: wordpress x14
Paths: /cms/wp-login.php /wp-login.php /wp/wp-login.php /wordpress/wp-login.php / /wp-json/wp/v2/ /robots.txt /xmlrpc.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403; 361 further requests refused after the ban between 202 ...
show more21 exploit-probe requests, each answered 403; 361 further requests refused after the ban between 2026-09-01T03:17:34Z and 2026-10-24T19:08:21Z.
Signatures: wordpress x17, server-script x4
Paths: /wp/ /wordpress/ /blog/ /site/ / /wp/wp-json/batch/v1/ /press/ /news/
User agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403 between 2026-10-24T19:15:56Z and 2026-10-24T19:15:56Z.
...
show more14 exploit-probe requests, each answered 403 between 2026-10-24T19:15:56Z and 2026-10-24T19:15:56Z.
Signatures: wordpress x14
Paths: /wp-json/ /wp-content/themes/ /wp-content/plugins/ /wp-includes/post.php /wp-includes/user.php /wp-includes/option.php /wp-includes/version.php /wp-admin/load-styles.php
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403; 170 further requests refused after the ban between 202 ...
show more21 exploit-probe requests, each answered 403; 170 further requests refused after the ban between 2026-10-21T18:58:10Z and 2026-10-24T17:01:19Z.
Signatures: server-script x21
Paths: /admin.php /1.php /a.php /122.php /222.php /dex.php /file.php /bnmtp.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
38 exploit-probe requests, each answered 403 between 2026-10-24T16:35:53Z and 2026-10-24T16:36:01Z.
...
show more38 exploit-probe requests, each answered 403 between 2026-10-24T16:35:53Z and 2026-10-24T16:36:01Z.
Signatures: secret-file x28, server-script x8, scanner-endpoint x2
Paths: /%2eenv/ /%2f%2eenv/ /.aws/config/ /.git/config/ /.kube/config/ /actuator/env/ /%2fbackend%2f%2eenv/ /actuator/configprops/
User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 598 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 598 further requests refused after the ban between 2026-10-15T07:27:18Z and 2026-10-24T15:03:38Z.
Signatures: server-script x13, wordpress x1
Paths: /admin.php /1.php /8.php /40341.php /h02ugyh.php /this_is_a_new_hello_world.php /2.php /k.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
29 exploit-probe requests, each answered 403; 1153 further requests refused after the ban between 20 ...
show more29 exploit-probe requests, each answered 403; 1153 further requests refused after the ban between 2026-08-31T00:12:21Z and 2026-10-24T08:03:59Z.
Signatures: wordpress x19, server-script x10
Paths: /blog/ /wp/ /wordpress/ / /blog/wp-json/batch/v1/ /wordpress/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp/index.php
User agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Query strings omitted. Timestamp is the last hit observed.
show less
75 exploit-probe requests, each answered 403; 115 further requests refused after the ban between 202 ...
show more75 exploit-probe requests, each answered 403; 115 further requests refused after the ban between 2026-10-19T08:47:51Z and 2026-10-24T07:22:58Z.
Signatures: secret-file x64, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: / /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.env.swp
User agent: Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)
Query strings omitted. Timestamp is the last hit observed.
show less
HackingBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.