Web logs 404 analysis - past 72 hours
Aug 15, 2026
Automatically updated daily

Checking for 404 errors in your logs can reveal more than just broken links, it can also expose files and URLs that attackers are actively scanning for. To track this behavior, we set up hundreds of honeypots and analyzed live web traffic data, giving us insight into which files and URLs are being targeted across the internet.


This table bellow list the top URLs being scanned in the past 72 hours. Some of them may show what attacker are actively looking for and new vulnerabilities in the wild.


Rank Scanned URL Counter
#1 /wp-login.php22,034
#2 /api/v2/auth16,347
#3 /dns-query15,393
#4 /autodiscover/autodiscover.xml5,036
#5 /index.php4,186
#6 /admin.php3,940
#7 /classwithtostring.php3,763
#8 /aa.php3,317
#9 /222.php3,195
#10 /about.php3,106
#11 /.well-known/traffic-advice3,085
#12 /.env2,943
#13 /adminfuns.php2,737
#14 /1.php2,693
#15 /api/v2/products/stock-batch2,664
#16 /[object%20Object]2,598
#17 /abcd.php2,345
#18 /wp-content/plugins/hellopress/wp_filemanager.php2,312
#19 /file.php2,264
#20 /sitemap.xml2,002
#21 /xmlrpc.php1,971
#22 /this_is_a_new_hello_world.php1,931
#23 /chosen.php1,806
#24 /k.php1,585
#25 /4041,561
#26 /404.php1,557
#27 /info.php1,557
#28 /8.php1,518
#29 /edit.php1,503
#30 /403.php1,491
#31 /busca1,467
#32 /goods.php1,457
#33 /wp-json/gravitysmtp/v1/tests/mock-data1,429
#34 /.well-known/passkey-endpoints1,415
#35 /upload/banner1,406
#36 /13.php1,367
#37 /ioxi-o.php1,357
#38 /wp-content/themes/admin.php1,310
#39 /33.php1,308
#40 /2.php1,303
#41 /a.php1,297
#42 /m.php1,282
#43 /alfa.php1,278
#44 /133.php1,272
#45 /bless.php1,269
#46 /shell.php1,252
#47 /file5.php1,250
#48 /-/-/-/-/-/-/-/-/-/-1,235
#49 /wp-good.php1,225
#50 /elp.php1,206
#51 /wp-content/admin.php1,202
#52 /xx.php1,195
#53 /media.php1,179
#54 /images.php1,176
#55 /av.php1,165
#56 /BDKR28WP.php1,160
#57 /as.php1,148
#58 /climatizacao/ar-condicionado/multi-split1,147
#59 /wp.php1,138
#60 /aaa.php1,136
#61 /term.php1,127
#62 /buy.php1,127
#63 /wp-json/mod/v1/clients/plugins/chQPixpcqq5Vc5UlRMK30vxzC5x2zR1v1,126
#64 /sitemap_index.xml1,106
#65 /coffee.php1,098
#66 /inputs.php1,079
#67 /sf.php1,077
#68 /1xmomo.php1,077
#69 /num.php1,076
#70 /wp-json/mod/v1/clients/themes/chQPixpcqq5Vc5UlRMK30vxzC5x2zR1v1,075
#71 /autoload_classmap.php1,068
#72 /4PJcpMFsD8B.php1,066
#73 /admin/function.php1,063
#74 /dex.php1,048
#75 /82.php1,036
#76 /0x.php1,025
#77 /mac.php1,008
#78 /3PJcpMFsD8B.php1,000
#79 /coffexium.php999
#80 /ops.php998
#81 /002.php989
#82 /t.php954
#83 /.well-known/gecko-litespeed.php953
#84 /666.php951
#85 /wp-admin/install.php947
#86 /new.php942
#87 /blurbs.php917
#88 /gecko.php909
#89 /fpwch.php903
#90 /155.php902
#91 /themes.php899
#92 /.git/config892
#93 /wp-content/plugins/fix/up.php882
#94 /cc.php876
#95 /file4.php872
#96 /100.php871
#97 /mgrr.php870
#98 /img.php864
#99 /biufile.php863
#100 /wp-admin859
#101 /wp-ws68.php856
#102 /yj09.php855
#103 /bthil.php847
#104 /gecko-new.php841
#105 /2x.php841
#106 /3.php840
#107 /mosty.php835
#108 /rip.php826
#109 /a7.php824
#110 /atomlib.php821
#111 /doc.php821
#112 /admin817
#113 /akcc.php813
#114 /cgi-bin812
#115 /core.php811
#116 /abc.php808
#117 /bajah.php807
#118 /ws.php806
#119 /domvf.php806
#120 /scxy.php800
#121 /index/function.php789
#122 /file2.php781
#123 /api/graphql774
#124 /ahax.php771
#125 /bgymj.php764
#126 /dropdown.php751
#127 /h.php751
#128 /php.php750
#129 /server.php748
#130 /saiga.php748
#131 /about/function.php746
#132 /w.php740
#133 /123.php732
#134 /x.php724
#135 /api/.env722
#136 /wp-admin/js/index.php720
#137 /alfa-rex.php716
#138 /sky.php714
#139 /ant.php708
#140 /bak.php705
#141 /adminner.php698
#142 /.env.local695
#143 /gm.php693
#144 /ccstore/v1/images690
#145 /.well-known/acme-challenge/content.php687
#146 /ab.php687
#147 /al.php686
#148 /flower.php685
#149 /.env.production682
#150 /test680
#151 /database.php668
#152 /.well-known/acme-challenge/disagrsxr.php667
#153 /--wp-lgj.php665
#154 /btx25.php662
#155 /0.php661
#156 /.well-known/acme-challenge/file659
#157 /default.php659
#158 /SDsadqwrf.php658
#159 /ws13.php658
#160 /wp-access.php656
#161 /backend/.env655
#162 /f35.php650
#163 /olympikus650
#164 /11.php648
#165 /archive.php645
#166 /.well-known643
#167 /profile.php642
#168 /phpinfo.php641
#169 /a3ampzmbipnkpxeqhqpsanCdefault.php640
#170 /man.php639
#171 /1wvekeybd9it2di2vyipgr6Cdefault.php639
#172 /moon.php629
#173 /app/.env622
#174 /admin/.env622
#175 /.env.prod618
#176 /zwso.php616
#177 /wp-content/plugins/admin.php614
#178 /administrator603
#179 /.env.example596
#180 /images/images/cache.php595
#181 /hello.php589
#182 /wp-trackback.php589
#183 /bootstrap.php588
#184 /bolt.php586
#185 /wp-content/index.php582
#186 /api/v2/products/1659369765579
#187 /dev/.env578
#188 /staging/.env575
#189 /phpinfo574
#190 /api/v2/products/1659371730574
#191 /api/v2/products/1659371489570
#192 /api/v2/products/1659369318570
#193 /i.php569
#194 /api/v2/products/1659370143569
#195 /sources.php567
#196 /api/v2/products/1659369592565
#197 /api/v2/products/1659370649565
#198 /api/v2/products/1659370315565
#199 /xleet.php563
#200 /api/v2/products/1659371462563
#201 /3pjcpmfsd8b.php561
#202 /ae.php561
#203 /7.php558
#204 /406.php558
#205 /.well-known/acme-challenge/file.php557
#206 /laravel/.env555
#207 /api/v2/products/1659371220555
#208 /api/v2/products/1659370690555
#209 /api/v2/products/1659370539555
#210 /api/v2/products/1659372022555
#211 /ano.php554
#212 /api/v2/products/1659369941553
#213 /api/v2/products/1659371194553
#214 /api/v2/products/1659371884552
#215 /api/config550
#216 /aar.php548
#217 /.well-known/about.php548
#218 /bb.php548
#219 /api/v2/products/1659369485548
#220 /api/v2/products/1659371029547
#221 /manager.php546
#222 /api/v2/products/1659370540546
#223 /mini.php545
#224 /api/v2/products/1659369366545
#225 /admin-author.php544
#226 /app.php544
#227 /.well-known/file.php540
#228 /fw.php540
#229 /wp-2019.php540
#230 /.well-known/disagrsxr.php539
#231 /api/v2/products/1659371217539
#232 /core/.env537
#233 /api/v2/products/1659371950535
#234 /config.php530
#235 /class-t.api.php528
#236 /.well-known/pki-validation/about.php527
#237 /.well-known/pki-validation/ckyocyyp.php526
#238 /.env.save526
#239 /.well-known/wp-links-opml.php525
#240 /.well-known/radio.php525
#241 /.well-known/pki-validation/xmrlpc.php525
#242 /.well-known/pki-validation/worksec.php525
#243 /.well-known/pki-validation/mariju.php525
#244 /wp-blog.php525
#245 /admin/admin.php522
#246 /wordpress522
#247 /.well-known/acme-challenge/admin.php521
#248 /aged.php520
#249 /essexec.php520
#250 /wp-content/uploads519
#251 /simple.php517
#252 /.env.bak515
#253 /browse.php513
#254 /apikey/mar.php509
#255 /wp-json/oembed/1.0/embed507
#256 /cron.php505
#257 /page-sitemap.xml504
#258 /old501
#259 /add_actualites.php499
#260 /upfile.php496
#261 /form.php495
#262 /contentloader1.php494
#263 /wp-sigunq.php494
#264 /wp-the.php494
#265 /zoom1.php491
#266 /wp-content/packed.php491
#267 /07.php491
#268 /p.php490
#269 /wp-cron.php489
#270 /web/.env488
#271 /not_found487
#272 /config.env485
#273 /wp-plain.php485
#274 /wander.php483
#275 /i99z7zzbwtpteujvv6s8hiCdefault.php483
#276 /colour.php481
#277 /wp481
#278 /.well-known/wp-login.php480
#279 /about.php7478
#280 /.well-known/acme-challenge/index.php477
#281 /wso.php476
#282 /cong.php476
#283 /tool.php474
#284 /info474
#285 /backup472
#286 /.env.php471
#287 /ms-edit.php468
#288 /.env.php.bak467
#289 /login467
#290 /classsmtps.php466
#291 /xyn.php466
#292 /special.php465
#293 /config/.env.php464
#294 /r.php462
#295 /api/v2/products/1659369038457
#296 /yanz.php455
#297 /.env.local.php453
#298 /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by452
#299 /wp-admin.php449
#300 /api/v2/products/1659368975449
#301 /var/.env.local.php448
#302 /app_dev.php/_profiler/.env448
#303 /.env.example.php448
#304 /test/.env.php448
#305 /.env.php.backup448
#306 /.env.php-backup448
#307 /.env.php-bak448
#308 /sendgrid/.env.php448
#309 /twilio/.env.php448
#310 /config.dev.php448
#311 /.env.production.php448
#312 /.env.sample.php448
#313 /news.php444
#314 /wp-admin/js442
#315 /albin.php434
#316 /db.php433
#317 /wp-admin/profile.php433
#318 /new431
#319 /wp-content/file.php429
#320 /amfsqvgv.php429
#321 /67.php429
#322 /artes428
#323 /f7.php428
#324 /wp-admin/edit.php428
#325 /wp-content/themes/about.php425
#326 /fffm.php420
#327 /lock360.php416
#328 /checkout/cart/add412
#329 /wp-admin/css409
#330 /wp-admin/css/about.php408
#331 /function/function.php408
#332 /wp-admin/a.php407
#333 /ss.php406
#334 /ultra.php403
#335 /cv.php402
#336 /api/v1/5331de46da1425c8b5f036d69da64571/json/desconto-url/dados-xml398
#337 /wp-json394
#338 /wp-admin/plugins.php389
#339 /.aws/credentials387
#340 /byp.php387
#341 /wp-includes/wlwmanifest.xml385
#342 /wp-admin/admin-ajax.php384
#343 /xmrlpc.php381
#344 /crgio.php379
#345 /wp-admin/js/widgets379
#346 /wp-mail.php371
#347 /inso.php368
#348 /HNAP1367
#349 /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php364
#350 /wp-includes/rest-api364
#351 /wp-admin/images362
#352 /worksec.php361
#353 /uploads359
#354 /wp-json/mod/v1/clients/plugins/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ358
#355 /dot.php356
#356 /min.php353
#357 /rest/V1/salesRules352
#358 /wp-json/mod/v1/clients/plugins/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR350
#359 /defaults.php349
#360 /css.php348
#361 /admin/controller/extension347
#362 /sendgrid.env347
#363 /wp-json/mod/v1/clients/themes/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR346
#364 /wp-admin/setup-config.php345
#365 /wp-json/mod/v1/clients/themes/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ343
#366 /image.php343
#367 /wp-admin/css/colors/midnight342
#368 /item.php341
#369 /debug/default/view339
#370 /file1.php337
#371 /echkm.php336
#372 /server/.env335
#373 /file61.php334
#374 /env333
#375 /nc4.php331
#376 /wp/wp-includes/wlwmanifest.xml330
#377 /web/wp-includes/wlwmanifest.xml330
#378 /blog330
#379 /asasx.php330
#380 /contrato/wap/crons/enviar-email.php330
#381 /wordpress/wp-includes/wlwmanifest.xml329
#382 /css/index.php325
#383 /wp-content/upgrade/index.php325
#384 /erty.php321
#385 /php8.php320
#386 /blog/wp-includes/wlwmanifest.xml320
#387 /api/v2/app-dieta-treino/customers/email-check317
#388 /pb317
#389 /submissions315
#390 /news/wp-includes/wlwmanifest.xml314
#391 /website/wp-includes/wlwmanifest.xml314
#392 /graphql313
#393 /wp-includes/block-bindings313
#394 /.env.dev312
#395 /debug.php307
#396 /NewFile.php306
#397 /acp.php304
#398 /wp-includes/html-api302
#399 /wicked.php302
#400 /zxz.php302
#401 /wp-content/themes/seotheme/db.php301
#402 /wp-includes301
#403 /root.php300
#404 /wp-json/mod/v1/clients/plugins/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8300
#405 /wp-content/themes/pridmag/il.php298
#406 /wp-content/plugins/wp-diambar/includes/loadme.php298
#407 /xxw.php297
#408 /2019/wp-includes/wlwmanifest.xml297
#409 /alfanew.php7297
#410 /wp-json/mod/v1/clients/themes/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8297
#411 /vx.php296
#412 /shop/wp-includes/wlwmanifest.xml296
#413 /edit-tags.php293
#414 /cdn-cgi/rum293
#415 /f.php292
#416 /deepseek_d.php291
#417 /files/index.php291
#418 /txets.php291
#419 /wp-content/wp-conflg.php291
#420 /wp-content/plugins/index.php290
#421 /App/__healthcheck290
#422 /wp-admin/css/colors/modern289
#423 /vendor287
#424 /feed/https:/vivaacidadenews.com.br/feed286
#425 /ccstore/v1/registry284
#426 /kq1.php283
#427 /u.php282
#428 /dragonshell.php282
#429 /boaform/admin/formLogin281
#430 /bk.php279
#431 /cgi-bin/index.php278
#432 /text.php277
#433 /wp-includes/pomo276
#434 /files.php275
#435 /user.php275
#436 /mcp274
#437 /post.php272
#438 /en/autodiscover/autodiscover.xml272
#439 /admin/index.php271
#440 /makeasmtp.php271
#441 /error.php270
#442 /bnm.php269
#443 /test.php269
#444 /wp-temp.php266
#445 /wp-admin/network266
#446 /news-sitemap.xml265
#447 /o.php265
#448 /infraalert/connections.php265
#449 /wp-includes/fonts264
#450 /ws54.php263
#451 /w1.php262
#452 /plugins.php262
#453 /drykl.php262
#454 /2018/wp-includes/wlwmanifest.xml262
#455 /wp-json/mod/v1/clients/themes/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n262
#456 /feed262
#457 /ci/config/.env261
#458 /nw.php260
#459 /sdk259
#460 /cache.php259
#461 /y.php258
#462 /public/vx.php258
#463 /api/v2/brands/4718258
#464 /96i.php257
#465 /.gitlab-ci.yml257
#466 /aafewc0k.php256
#467 /wap.php255
#468 /appreciators.php254
#469 /wp-json/mod/v1/clients/plugins/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5254
#470 /evox/about254
#471 /adminer.php253
#472 /api/settings253
#473 /load.php253
#474 /wp-json/mod/v1/clients/themes/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5252
#475 /secrets.env252
#476 /api/env251
#477 /catalogsearch/result251
#478 /wp-includes/js/jquery251
#479 /wp-admin/classwithtostring.php250
#480 /API/.env250
#481 /@fs/app/.env.local250
#482 /wp-includes/images249
#483 /zi-936.php249
#484 /public/css.php249
#485 /.env.vault249
#486 /wp-admin/wp.php248
#487 /wp-content248
#488 /wp-includes/block-supports248
#489 /twilio.env247
#490 /src/.env246
#491 /php-info.php246
#492 /wp-json/mod/v1/clients/plugins/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n245
#493 /storage/framework/.env244
#494 /.config.yaml244
#495 /app_dev.php/_profiler/phpinfo244
#496 /wp-content/cache244
#497 /home/ec2-user/.env243
#498 /api/.env/.env.dev243
#499 /alison/.env243
#500 /api/.env/wso243


Data was last updated on: Aug 15, 2026



Logging Research

We love logs. In this section we will share some of the data we are parsing from our logs and honeypots we have live.

Trunc Logging

Logging for fun and a good night of sleep.

  • Real time search
  • Google simple
  • Cheap
  • Just works
  • PCI compliance
Trunc Research

Latest log-based threat analysis added.

Contact us!

Do you have an idea for a research that is not here? See something wrong? Contact us at support@noc.org

Tired of price gouging
  • Clear pricing
  • No need to guess
  • Real people
  • Real logging

Simple, Affordable, Log Management and Analysis.

14 days free trial. No credit card required.