38 exploit-probe requests, each answered 403 between 2026-10-24T16:35:53Z and 2026-10-24T16:36:01Z.
...
show more38 exploit-probe requests, each answered 403 between 2026-10-24T16:35:53Z and 2026-10-24T16:36:01Z.
Signatures: secret-file x28, server-script x8, scanner-endpoint x2
Paths: /%2eenv/ /%2f%2eenv/ /.aws/config/ /.git/config/ /.kube/config/ /actuator/env/ /%2fbackend%2f%2eenv/ /actuator/configprops/
User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 598 further requests refused after the ban between 202 ...
show more14 exploit-probe requests, each answered 403; 598 further requests refused after the ban between 2026-10-15T07:27:18Z and 2026-10-24T15:03:38Z.
Signatures: server-script x13, wordpress x1
Paths: /admin.php /1.php /8.php /40341.php /h02ugyh.php /this_is_a_new_hello_world.php /2.php /k.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
29 exploit-probe requests, each answered 403; 1153 further requests refused after the ban between 20 ...
show more29 exploit-probe requests, each answered 403; 1153 further requests refused after the ban between 2026-08-31T00:12:21Z and 2026-10-24T08:03:59Z.
Signatures: wordpress x19, server-script x10
Paths: /blog/ /wp/ /wordpress/ / /blog/wp-json/batch/v1/ /wordpress/wp-json/batch/v1/ /wp/wp-json/batch/v1/ /wp/index.php
User agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Query strings omitted. Timestamp is the last hit observed.
show less
75 exploit-probe requests, each answered 403; 115 further requests refused after the ban between 202 ...
show more75 exploit-probe requests, each answered 403; 115 further requests refused after the ban between 2026-10-19T08:47:51Z and 2026-10-24T07:22:58Z.
Signatures: secret-file x64, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: / /.env /.env.aws /.env.bak /.env.dev /.env.old /.env.php /.env.swp
User agent: Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)
Query strings omitted. Timestamp is the last hit observed.
show less
13 exploit-probe requests, each answered 403 between 2026-10-24T06:34:17Z and 2026-10-24T06:34:55Z.
...
show more13 exploit-probe requests, each answered 403 between 2026-10-24T06:34:17Z and 2026-10-24T06:34:55Z.
Signatures: wordpress x12, server-script x1
Paths: /sitemap.xml /wp-json/wp/v2/users/ /wp-json/peprodev/v1/reset-password/ /wp-json/login-register-forms/v1/lost-password/ /wp-json/ /index.php /wp-json/users/ /wp-json/wp/v2/media/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
28 exploit-probe requests, each answered 403 between 2026-10-24T05:26:00Z and 2026-10-24T05:26:00Z.
...
show more28 exploit-probe requests, each answered 403 between 2026-10-24T05:26:00Z and 2026-10-24T05:26:00Z.
Signatures: server-script x18, wordpress x10
Paths: /1.php /heh.php /wso.php /abcd.php /file.php /shlo.php /about.php /admin.php
User agent: Go-http-client/1.1
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403; 55 further requests refused after the ban between 2026 ...
show more12 exploit-probe requests, each answered 403; 55 further requests refused after the ban between 2026-09-23T00:16:11Z and 2026-10-24T05:12:59Z.
Signatures: secret-file x11, credential-hunt x1
Paths: /.git/HEAD/ / /llm/credentials/ /.env.ai /.env.aws /litellm.yml /ai/config.yml /.env.anthropic
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
29 exploit-probe requests, each answered 403 between 2026-10-24T04:32:01Z and 2026-10-24T04:32:01Z.
...
show more29 exploit-probe requests, each answered 403 between 2026-10-24T04:32:01Z and 2026-10-24T04:32:01Z.
Signatures: secret-file x29
Paths: /.env /.env.ci /.env.bak /.env.dev /.env.old /.env.swp /.env.txt /.env.uat
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
101 exploit-probe requests, each answered 403; 490 further requests refused after the ban between 20 ...
show more101 exploit-probe requests, each answered 403; 490 further requests refused after the ban between 2026-09-23T05:03:13Z and 2026-10-24T03:32:47Z.
Signatures: secret-file x77, server-script x14, credential-hunt x8, dump-file x2
Paths: / /config.php /gemini.config /hubspot.config /credentials.json /env.txt /v1/.env /v2/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-10-23T22:10:56Z and 2026-10-23T22:10:56Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-10-23T22:10:56Z and 2026-10-23T22:10:56Z.
Signatures: server-script x19, wordpress x3
Paths: /1.php /ai.php /sm.php /222.php /403.php /xl9.php /php8.php /admin.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
33 exploit-probe requests, each answered 403; 169 further requests refused after the ban between 202 ...
show more33 exploit-probe requests, each answered 403; 169 further requests refused after the ban between 2026-10-12T17:35:52Z and 2026-10-23T21:05:34Z.
Signatures: server-script x33
Paths: /admin.php /1.php /8.php /a.php /222.php /bnmtp.php /Component.php /adminfuns.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403; 335 further requests refused after the ban between 202 ...
show more21 exploit-probe requests, each answered 403; 335 further requests refused after the ban between 2026-09-01T03:17:34Z and 2026-10-23T19:22:52Z.
Signatures: wordpress x17, server-script x4
Paths: /wp/ /wordpress/ /site/ /wp/wp-json/batch/v1/ /blog/ / /press/ /news/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0
Query strings omitted. Timestamp is the last hit observed.
show less
19 exploit-probe requests, each answered 403 between 2026-10-23T19:28:09Z and 2026-10-23T19:28:09Z.
...
show more19 exploit-probe requests, each answered 403 between 2026-10-23T19:28:09Z and 2026-10-23T19:28:09Z.
Signatures: secret-file x15, server-script x2, dump-file x1, wordpress x1
Paths: /backend/.env /.env /.env.dev /.env.prod /.env.stage /.env.sample /source/.env /system/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
21 exploit-probe requests, each answered 403; 451 further requests refused after the ban between 202 ...
show more21 exploit-probe requests, each answered 403; 451 further requests refused after the ban between 2026-10-13T15:38:50Z and 2026-10-23T17:48:45Z.
Signatures: server-script x20, wordpress x1
Paths: /admin.php /wp-content/themes/index.php /1ac.php /wp-logis.php /wp-trbacks.php /this_is_a_new_hello_world.php /2.php /k.php
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
77 exploit-probe requests, each answered 403; 227 further requests refused after the ban between 202 ...
show more77 exploit-probe requests, each answered 403; 227 further requests refused after the ban between 2026-10-18T16:28:47Z and 2026-10-23T14:59:31Z.
Signatures: secret-file x66, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: / /.env /.env.bak /.env.swp /.aws/.env /.env.local /.env.backup /.env.sample
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Query strings omitted. Timestamp is the last hit observed.
show less
91 exploit-probe requests, each answered 403 between 2026-10-23T14:35:45Z and 2026-10-23T14:35:45Z.
...
show more91 exploit-probe requests, each answered 403 between 2026-10-23T14:35:45Z and 2026-10-23T14:35:45Z.
Signatures: secret-file x73, dev-server x5, path-traversal x5, ssrf x4, credential-hunt x4
Paths: /.env /@fs/.env /proc/self/environ/ /__vite_rsc_findSourceMapURL/ /.env.local / /@fs/src/.env /.env.production
User agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Query strings omitted. Timestamp is the last hit observed.
show less
22 exploit-probe requests, each answered 403 between 2026-10-15T11:51:41Z and 2026-10-23T08:01:43Z.
...
show more22 exploit-probe requests, each answered 403 between 2026-10-15T11:51:41Z and 2026-10-23T08:01:43Z.
Signatures: wordpress x14, server-script x8
Paths: /000.php /wp-content/about.php /wp-admin/css/admin.php /wp-content/themes/seotheme/db.php /dex.php /abcd.php /bless.php /blurbs.php
User agent: Go-http-client/2.0
Query strings omitted. Timestamp is the last hit observed.
show less
112 exploit-probe requests, each answered 403 between 2026-10-23T02:40:30Z and 2026-10-23T02:40:30Z. ...
show more112 exploit-probe requests, each answered 403 between 2026-10-23T02:40:30Z and 2026-10-23T02:40:30Z.
Signatures: secret-file x112
Paths: /.env.sample /.env.staging /.env.testing /.env.template /.env.development /.env.local.example /.env.production.example /.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:151.0) Gecko/20100101 Firefox/151.0
Query strings omitted. Timestamp is the last hit observed.
show less
72 exploit-probe requests, each answered 403 between 2026-10-23T01:30:02Z and 2026-10-23T01:30:02Z.
...
show more72 exploit-probe requests, each answered 403 between 2026-10-23T01:30:02Z and 2026-10-23T01:30:02Z.
Signatures: secret-file x61, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: /.env /.env.bak /.env.swp /api/.env /app/.env /dev/.env /info.php /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
72 exploit-probe requests, each answered 403 between 2026-10-22T17:11:30Z and 2026-10-22T17:11:30Z.
...
show more72 exploit-probe requests, each answered 403 between 2026-10-22T17:11:30Z and 2026-10-22T17:11:30Z.
Signatures: secret-file x61, server-script x5, credential-hunt x3, dump-file x2, wordpress x1
Paths: /.env /.env.bak /.env.swp /api/.env /app/.env /dev/.env /info.php /.aws/.env
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
12 exploit-probe requests, each answered 403; 31 further requests refused after the ban between 2026 ...
show more12 exploit-probe requests, each answered 403; 31 further requests refused after the ban between 2026-10-20T13:54:25Z and 2026-10-22T16:11:11Z.
Signatures: server-script x12
Paths: /w.php /php8.php /admin.php /shell.php /vn.php /file.php /av.php /jp.php
User agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
38 exploit-probe requests, each answered 403 between 2026-10-22T15:01:46Z and 2026-10-22T15:01:46Z.
...
show more38 exploit-probe requests, each answered 403 between 2026-10-22T15:01:46Z and 2026-10-22T15:01:46Z.
Signatures: secret-file x27, dump-file x10, server-script x1
Paths: /core/install.php /.env /.env.bak /.env.old /api/.env /app/.env /src/.env /web/.env
User agent: MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)
Query strings omitted. Timestamp is the last hit observed.
show less
18 exploit-probe requests, each answered 403 between 2026-10-07T02:22:51Z and 2026-10-22T14:36:08Z.
...
show more18 exploit-probe requests, each answered 403 between 2026-10-07T02:22:51Z and 2026-10-22T14:36:08Z.
Signatures: server-script x8, secret-file x6, wordpress x4
Paths: /.env /.env.bak /test.php /wp-json/ /index.php /phpinfo.php /wp-login.php /.aws/credentials/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
Query strings omitted. Timestamp is the last hit observed.
show less
24 exploit-probe requests, each answered 403; 42 further requests refused after the ban between 2026 ...
show more24 exploit-probe requests, each answered 403; 42 further requests refused after the ban between 2026-10-22T14:10:51Z and 2026-10-22T14:11:01Z.
Signatures: server-script x23, wordpress x1
Paths: /admin.php /opsh.php /y.php /b8.php /hh.php /add.php /ana.php /ano.php
Query strings omitted. Timestamp is the last hit observed.
show less
14 exploit-probe requests, each answered 403; 3 further requests refused after the ban between 2026- ...
show more14 exploit-probe requests, each answered 403; 3 further requests refused after the ban between 2026-10-22T13:26:53Z and 2026-10-22T13:27:30Z.
Signatures: wordpress x12, server-script x2
Paths: / /wp-json/wp/v2/users/ /graphql/ /index.php /wp-admin/admin-ajax.php /wp-json/crm-memberships/v1/reset/ /wp-json/kirki/v1/forgot-password/ /wp-json/peprodev/v1/reset-password/
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Query strings omitted. Timestamp is the last hit observed.
show less
Brute-ForceBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.