Web logs 404 analysis - past 72 hours
May 15, 2026
Automatically updated daily

Checking for 404 errors in your logs can reveal more than just broken links, it can also expose files and URLs that attackers are actively scanning for. To track this behavior, we set up hundreds of honeypots and analyzed live web traffic data, giving us insight into which files and URLs are being targeted across the internet.


This table bellow list the top URLs being scanned in the past 72 hours. Some of them may show what attacker are actively looking for and new vulnerabilities in the wild.


Rank Scanned URL Counter
#1 /api/v2/auth22,679
#2 /wp-login.php21,342
#3 /autodiscover/autodiscover.xml8,845
#4 /.well-known/traffic-advice4,350
#5 /api/v2/products/stock-batch4,302
#6 /[object%20Object]4,140
#7 /index.php3,538
#8 /.well-known/passkey-endpoints2,560
#9 /4042,006
#10 /.env1,910
#11 /admin.php1,818
#12 /file.php1,800
#13 /ccstore/v1/images1,583
#14 /saiga.php1,566
#15 /upload/banner1,514
#16 /ioxi-o.php1,506
#17 /about.php1,447
#18 /adminfuns.php1,432
#19 /classwithtostring.php1,334
#20 /info.php1,236
#21 /abcd.php1,212
#22 /climatizacao/ar-condicionado/multi-split1,147
#23 /admin1,146
#24 /aa.php1,120
#25 /-/-/-/-/-/-/-/-/-/-1,073
#26 /goods.php1,055
#27 /edit.php983
#28 /xmlrpc.php973
#29 /autoload_classmap.php937
#30 /sources.php935
#31 /wp-json/oembed/1.0/embed929
#32 /olympikus919
#33 /buy.php911
#34 /sitemap.xml899
#35 /api/v2/products/1659369592886
#36 /api/v2/products/1659369765885
#37 /api/v2/products/1659371730884
#38 /api/v2/products/1659370143884
#39 /chosen.php877
#40 /api/v2/products/1659369318876
#41 /api/v2/products/1659371462873
#42 /api/v2/products/1659370315872
#43 /api/v2/products/1659371489870
#44 /api/v2/products/1659371194867
#45 /api/v2/products/1659370539866
#46 /api/v2/products/1659370649864
#47 /api/v2/products/1659372022864
#48 /api/v2/products/1659369485862
#49 /api/v2/products/1659370690858
#50 /api/v2/products/1659369941857
#51 /api/v2/products/1659371220852
#52 /api/v2/products/1659371884847
#53 /api/v2/products/1659369366846
#54 /api/v2/products/1659371029846
#55 /api/v2/products/1659371217845
#56 /api/v2/products/1659370540844
#57 /api/v2/products/1659371950831
#58 /wp-good.php816
#59 /api/v2/products/1659369038770
#60 /api/v2/products/1659368975745
#61 /wp-cron.php738
#62 /flower.php711
#63 /wp-admin705
#64 /cgi-bin704
#65 /1.php698
#66 /wp-content/themes/admin.php669
#67 /cong.php663
#68 /backup650
#69 /shop644
#70 /inputs.php639
#71 /checkout/cart/add635
#72 /.git/config629
#73 /elp.php610
#74 /rest/V1/salesRules608
#75 /wp-trackback.php606
#76 /222.php604
#77 /file2.php602
#78 /alfa.php585
#79 /en/AutoDiscover/autodiscover.xml575
#80 /api/v1/5331de46da1425c8b5f036d69da64571/json/desconto-url/dados-xml571
#81 /wp-json/mod/v1/clients/plugins/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ570
#82 /akcc.php564
#83 /xmrlpc.php564
#84 /images/images/cache.php548
#85 /wp-json/mod/v1/clients/themes/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ548
#86 /moon.php544
#87 /bolt.php536
#88 /k.php530
#89 /pb527
#90 /asasx.php522
#91 /bless.php521
#92 /uploads519
#93 /new.php517
#94 /wp-json/mod/v1/clients/plugins/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR516
#95 /rip.php514
#96 /wp-json/mod/v1/clients/themes/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR506
#97 /wp.php490
#98 /not_found482
#99 /contrato/wap/crons/enviar-email.php478
#100 /wp-json/mod/v1/clients/plugins/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8473
#101 /wp-json/mod/v1/clients/themes/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8473
#102 /admin/config.php471
#103 /ccstore/v1/registry469
#104 /index/function.php468
#105 /atomlib.php464
#106 /wp-content/plugins/hellopress/wp_filemanager.php463
#107 /dropdown.php453
#108 /wp-content/plugins/fix/up.php451
#109 /wp-content/admin.php450
#110 /themes.php445
#111 /makeasmtp.php429
#112 /cdn-cgi/rum425
#113 /doc.php424
#114 /wp-content/plugins/admin.php416
#115 /wordpress408
#116 /en/autodiscover/autodiscover.xml403
#117 /admin/controller/extension/extension401
#118 /image.php401
#119 /radio.php396
#120 /akc.php394
#121 /wp-json/gravitysmtp/v1/tests/mock-data389
#122 /old389
#123 /wp-content/wp-conflg.php387
#124 /nc4.php387
#125 /wp386
#126 /.well-known/apple-app-site-association386
#127 /shell.php369
#128 /.git/index366
#129 /api/v2/brands/4718360
#130 /modules360
#131 /wp-content/uploads359
#132 /class-t.api.php358
#133 /as.php358
#134 /administrator358
#135 /login354
#136 /new352
#137 /ss.php349
#138 /wp-json/mod/v1/clients/themes/dfH6fTJpNKPXFmf72OBbcx9a6kb73dAu345
#139 /wp-admin/images337
#140 /profile.php335
#141 /server.php332
#142 /wp-admin/images/admin.php331
#143 /wp-admin/css329
#144 /w.php323
#145 /storage/2018/09/Educac322
#146 /api/.env318
#147 /api/v2/app-dieta-treino/customers/email-check317
#148 /minha-conta/pedidoapi/v2/front/checkout/cart315
#149 /submissions315
#150 /wp-json/mod/v1/clients/plugins/dfH6fTJpNKPXFmf72OBbcx9a6kb73dAu314
#151 /test1.php313
#152 /man.php313
#153 /backend/.env312
#154 /api/sessions311
#155 /lock360.php310
#156 /api/v2/marketplace/sellers/queue308
#157 /+CSCOL+/a1.jar307
#158 /+CSCOL+/Java.jar307
#159 /2.php302
#160 /content.php302
#161 /.well-known301
#162 /files.php298
#163 /wp-content/plugins/wp-diambar/includes/loadme.php298
#164 /admin/.env296
#165 /webapp/wcs/stores/servlet/Search294
#166 /wp-content/index.php293
#167 /propolis-verde.html293
#168 /api/v2/marketplace/rebates/queue291
#169 /App/__healthcheck290
#170 /wp-includes/style-engine288
#171 /ws.php287
#172 /wp-content/plugins/WordPressCore285
#173 /worksec.php285
#174 /wp-json/mod/v1/clients/themes/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5285
#175 /deepseek_d.php284
#176 /wp-includes/Text/Diff/Renderer282
#177 /wp-json/mod/v1/clients/plugins/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5279
#178 /private277
#179 /xleet.php273
#180 /default.php271
#181 /wp-admin/includes271
#182 /api/v2/products/531267
#183 /t.php266
#184 /infraalert/connections.php265
#185 /wp-content/themes/about.php264
#186 /wp-admin/css/colors/blue/index.php263
#187 /wp-admin.php262
#188 /wp-includes/rest-api261
#189 /test.php259
#190 /api259
#191 /api/v2/marketplace/sellers/351/products/queue258
#192 /feed256
#193 /wp-json/mod/v1/clients/themes/AF6QHtkifS7afe9hYdSVzYwNUya7Deki253
#194 /wp-json/mod/v1/clients/plugins/AF6QHtkifS7afe9hYdSVzYwNUya7Deki252
#195 /portal/.env252
#196 /404.php251
#197 /wp-json/mod/v1/clients/plugins/5HEdh3eDqs6NhxAvfBJ5bWLGdvzCD248251
#198 /blog249
#199 /api/v2/batch/1173248
#200 /api/v2/batch/1219248
#201 /api/v2/batch/1198248
#202 /api/v2/batch/1193248
#203 /api/v2/batch/1192248
#204 /api/v2/batch/1189248
#205 /wp-includes/Requests/Exception248
#206 /wp-json/mod/v1/clients/themes/5HEdh3eDqs6NhxAvfBJ5bWLGdvzCD248248
#207 /api/v2/batch/1171247
#208 /api/v2/batch/1218247
#209 /api/v2/batch/1214247
#210 /api/v2/batch/1191247
#211 /api/v2/batch/1146247
#212 /api/v2/batch/1187247
#213 /api/v2/batch/1184247
#214 /api/v2/batch/1183247
#215 /api/v2/marketplace/sellers/388/products/queue246
#216 /api/v2/batch/1176246
#217 /api/v2/batch/1194246
#218 /api/v2/batch/1175246
#219 /api/v2/batch/1190246
#220 /api/v2/batch/1188246
#221 /api/v2/batch/1181246
#222 /api/v2/batch/1179246
#223 /api/v2/batch/1178246
#224 /api/v2/marketplace/sellers/391/products/queue245
#225 /api/v2/marketplace/sellers/455/products/queue245
#226 /api/v2/marketplace/sellers/463/products/queue245
#227 /api/v2/marketplace/sellers/31/products/queue245
#228 /api/v2/marketplace/sellers/425/products/queue245
#229 /api/v2/marketplace/sellers/457/products/queue245
#230 /api/v2/marketplace/sellers/537/products/queue245
#231 /api/v2/batch/1170245
#232 /api/v2/batch/1186245
#233 /api/v2/batch/1185245
#234 /api/v2/batch/1182245
#235 /num.php245
#236 /api/v2/marketplace/sellers/390/products/queue244
#237 /api/v2/batch/1168244
#238 /api/v2/batch/1177244
#239 /api/v2/batch/1174244
#240 /api/v2/batch/1169244
#241 /api/v2/batch/1172244
#242 /wp-content/about.php244
#243 /wp-includes/ID3244
#244 /api/v2/batch/1166243
#245 /api/v2/batch/1145243
#246 /api/v2/batch/1142243
#247 /api/v2/batch/1165242
#248 /cc.php242
#249 /css.php240
#250 /gecko.php239
#251 /wp-json/mod/v1/clients/themes/yQYJEiML0EAKHJ1ba5G863ebauTGL4v6237
#252 /app/.env236
#253 /bak.php236
#254 /api/v2/marketplace/sellers/430/products/queue235
#255 /wp-includes234
#256 /api/v2/marketplace/sellers/354/products/queue233
#257 /api/v2/marketplace/sellers/473/products/queue233
#258 /api/v2/marketplace/sellers/476/products/queue233
#259 /api/v2/marketplace/sellers/363/products/queue233
#260 /api/v2/marketplace/sellers/360/products/queue233
#261 /wp-includes/IXR233
#262 /wp-content/plugins/yanierin/akcc.php233
#263 /ae.php233
#264 /rest/V1/products232
#265 /api/v2/marketplace/sellers/487/products/queue232
#266 /api/v2/marketplace/sellers/471/products/queue232
#267 /api/v2/marketplace/sellers/364/products/queue232
#268 /api/v2/marketplace/sellers/655/products/queue230
#269 /api/v2/marketplace/sellers/423/products/queue230
#270 /wp-admin/class-db.php230
#271 /web_api/auth229
#272 /wp-json/mod/v1/clients/themes/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n229
#273 /13.php228
#274 /api/v2/marketplace/sellers/536/products/queue227
#275 /api/v2/marketplace/sellers/533/products/queue227
#276 /wp-content/upgrade227
#277 /adminfuns.php/.well-known/acme-challenge/file.php227
#278 /wp-includes/Text226
#279 /bin226
#280 /wp-json/mod/v1/clients/themes/3Y0UftK4ZgkOOyNentdzLR3O1XCgseZb225
#281 /wp-admin/js/index.php223
#282 /css/admin.php222
#283 /wp-admin/images/file.php220
#284 /wp-json/mod/v1/clients/plugins/yQYJEiML0EAKHJ1ba5G863ebauTGL4v6219
#285 /wp-includes/wlwmanifest.xml219
#286 /wp/wp-includes/wlwmanifest.xml219
#287 /web/wp-includes/wlwmanifest.xml219
#288 /log.php219
#289 /wordpress/wp-includes/wlwmanifest.xml218
#290 /manager.php218
#291 /wp-json/mod/v1/clients/plugins/3Y0UftK4ZgkOOyNentdzLR3O1XCgseZb218
#292 /minha-conta/pedido/2168498/detalheapi/v2/front/checkout/cart218
#293 /wp-admin/product.php217
#294 /wp-json/mod/v1/clients/plugins/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n217
#295 /blog/wp-includes/wlwmanifest.xml216
#296 /a.php216
#297 /wp-content/plugins/sid/sidwso.php216
#298 /simple.php215
#299 /api/catalog_system/pub/products/search215
#300 /wp-includes/fonts215
#301 /search213
#302 /wp-includes/pomo212
#303 /file5.php211
#304 /minha-conta/pedido/2167917/detalheapi/v2/front/checkout/cart211
#305 /defaults.php210
#306 /root.php210
#307 /rest/V1/orders209
#308 /developmentserver/metadatauploader206
#309 /file4.php206
#310 /dev/.env205
#311 /api/v1/5331de46da1425c8b5f036d69da64571/json/pedido/atualizacoes204
#312 /wp-admin/css/colors/coffee204
#313 /2019/wp-includes/wlwmanifest.xml203
#314 /wp-content/plugins/hello-dolly203
#315 /shop/wp-includes/wlwmanifest.xml202
#316 /wp-content/upgrade/index.php202
#317 /wp-content/plugins/ultimate-member202
#318 /wp-admin/css/colors/sunrise202
#319 /sitemap_index.xml199
#320 /wp-admin/css/colors/midnight199
#321 /api/v1/ede49134002f41b1320469a869921657/json/pedido/atualizacoes198
#322 /0x.php198
#323 /wp-json/mod/v1/clients/plugins/dQbiHaYYDAThrFKTMcDQ8bWWiNvx28Yd198
#324 /wp-content/plugins/gravityforms198
#325 /wordpress/wp-admin/maint198
#326 /api/v1/7d7f91c7b727f4627bf81883ea25a347/json/pedido/atualizacoes197
#327 /wp-includes/html-api197
#328 /403.php196
#329 /mail/.env195
#330 /build.php194
#331 /api/v2/3f0803957c6b00580c1d83ddef8033ca/json/pedido/atualizacoes193
#332 /style.php193
#333 /wp-admin/network193
#334 /aaa.php190
#335 /wp-includes/js/crop190
#336 /wp-json/mod/v1/clients/themes/dQbiHaYYDAThrFKTMcDQ8bWWiNvx28Yd189
#337 /4ec82611188
#338 /api/v2/marketplace/sellers/534/products/queue188
#339 /api/v2/marketplace/sellers/841/products/queue187
#340 /images186
#341 /hudson185
#342 /api/v1/5331de46da1425c8b5f036d69da64571/json/produto/atualizacoes185
#343 /wp-content/plugins/wp-file-manager184
#344 /en/assets/images/logos/HTB.JPG183
#345 /p.php183
#346 /wp-includes/assets183
#347 /files180
#348 /wp-content/uploads/2022/07180
#349 /userlogin179
#350 /loja/busca.php177
#351 /api/v2/3f0803957c6b00580c1d83ddef8033ca/json/produto/atualizacoes177
#352 /news/wp-includes/wlwmanifest.xml177
#353 /website/wp-includes/wlwmanifest.xml177
#354 /install.php175
#355 /register175
#356 /api/v1/ede49134002f41b1320469a869921657/json/produto/atualizacoes174
#357 /api/v2/products/21965174
#358 /api/v1/7d7f91c7b727f4627bf81883ea25a347/json/produto/atualizacoes173
#359 /wp-content/themes/twentytwentythree173
#360 /wp-includes/images173
#361 /x.php171
#362 /wp-json/mod/v1/clients/themes/O8IPZVSpWRsNUvKGmp6tCOXPEc5pwzOf171
#363 /owa/auth/logon.aspx171
#364 /owa/auth.owa171
#365 /wp-content/plugins/akismet170
#366 /f5.php170
#367 /sites/default/files169
#368 /wp-json/mod/v1/clients/plugins/O8IPZVSpWRsNUvKGmp6tCOXPEc5pwzOf169
#369 /wp-content/themes/twentytwentyfour169
#370 /wp-includes/PHPMailer169
#371 /wp-includes/block-supports169
#372 /wp-content/languages168
#373 /wp-content168
#374 /minha-conta-atk168
#375 /assets167
#376 /404testpage4525d2fdc166
#377 /wp-admin/js/widgets166
#378 /loja/casa.html165
#379 /filemanager.php164
#380 /staging/.env164
#381 /pagamento/mercadopago/ipn.php163
#382 /wp-content/plugins/contact-form-7163
#383 /server/.env163
#384 /sitemap-index.xml162
#385 /wp-content/uploads/2018/09/Educac162
#386 /sx.php161
#387 /demo/.env160
#388 /autoload_classmap/function.php159
#389 /ultra.php159
#390 /wp-includes/css156
#391 /wp-includes/block-bindings154
#392 /test/.env154
#393 /wp-bat.php154
#394 /pu9.php154
#395 /ds.php154
#396 /wp-content/plugins/about.php153
#397 /lowpr.php153
#398 /shop/.env153
#399 /god4m.php153
#400 /lufix.php150
#401 /wp-json/mod/v1/clients/plugins/222SatWljlPjOcZ6sbz9QrN2P7tPZ7fEhaw111149
#402 /goat.php149
#403 /txets.php148
#404 /wp-json/mod/v1/clients/themes/222SatWljlPjOcZ6sbz9QrN2P7tPZ7fEhaw111148
#405 /wp-content/plugins/litespeed-cache148
#406 /wp-includes/widgets147
#407 /blog/.env147
#408 /user/login146
#409 /mari.php146
#410 /wp-json/mod/v1/clients/themes/5HmAU7xN6qdUl3VpoGsirSopze0t5F2E145
#411 /api/v2/categories/10144
#412 /module/ngmercadolivre/notificacao144
#413 /AutoDiscover/autodiscover.xml144
#414 /123.php144
#415 /0.php144
#416 /wp-editor.php143
#417 /cloud/.env143
#418 /include143
#419 /asd.php143
#420 /07.php143
#421 /wp-content/video142
#422 /.env.local142
#423 /wp-json/mod/v1/clients/plugins/Jowup0YjuyoFl8756PugwrEu8CEOb7W142
#424 /assets/images142
#425 /.env.example142
#426 /berax.php142
#427 /axx.php142
#428 /form.php142
#429 /dashboard/.env141
#430 /Jcrop.php141
#431 /wp-content/plugins/index.php140
#432 /m/.env140
#433 /wp-admin/js139
#434 /store/.env139
#435 /vpn/.env139
#436 /webmail/.env139
#437 /remote/.env139
#438 /secure/.env138
#439 /play/aula/conteudo/buscar/4365382137
#440 /ftp/.env137
#441 /support/.env137
#442 /host/.env137
#443 /cache.php137
#444 /wp-includes/php-compat135
#445 /cdn/.env135
#446 /pop/.env135
#447 /app135
#448 /smtp/.env134
#449 /api/v2/marketplace/sellers/351/orders/queue133
#450 /admin/function.php133
#451 /db.php133
#452 /loja/catalogo.php133
#453 /wiki/.env133
#454 /kyami.php133
#455 /.aws/credentials132
#456 /wp-json/mod/v1/clients/themes/Jowup0YjuyoFl8756PugwrEu8CEOb7W132
#457 /mm.php132
#458 /hplfuns.php131
#459 /wp-admin/css/colors/ectoplasm130
#460 /akismet.php130
#461 /hello.php130
#462 /wp-content/cache128
#463 /version128
#464 /al.php128
#465 /wp-content/plugins/elementor127
#466 /wp-content/themes127
#467 /htaccess.php127
#468 /wp-conflg.php127
#469 /gifclass.php126
#470 /rest/V1/store/storeViews126
#471 /y.php126
#472 /mar.php126
#473 /api/v2/batch/3887125
#474 /api/v2/batch/1125125
#475 /api/v2/batch/500168125
#476 /api/v2/marketplace/sellers/463/orders/queue125
#477 /api/v2/marketplace/sellers/31/orders/queue125
#478 /api/v2/batch/193811125
#479 /api/v2/batch/193807125
#480 /api/v2/batch/193806125
#481 /api/v2/batch/193805125
#482 /api/v2/batch/193804125
#483 /api/v2/batch/193803125
#484 /api/v2/batch/193802125
#485 /api/v2/batch/193786125
#486 /api/v2/batch/193785125
#487 /api/v2/batch/193784125
#488 /api/v2/batch/193774125
#489 /api/v2/batch/193773125
#490 /api/v2/batch/193772125
#491 /api/v2/batch/193771125
#492 /api/v2/batch/194229125
#493 /api/v2/batch/193770125
#494 /api/v2/batch/194225125
#495 /api/v2/batch/193769125
#496 /api/v2/batch/194224125
#497 /api/v2/batch/193765125
#498 /api/v2/batch/194223125
#499 /api/v2/batch/194219125
#500 /api/v2/batch/194218125


Data was last updated on: May 15, 2026



Posted in: web-logsthreat-intel
Logging Research

We love logs. In this section we will share some of the data we are parsing from our logs and honeypots we have live.

Trunc Logging

Logging for fun and a good night of sleep.

  • Real time search
  • Google simple
  • Cheap
  • Just works
  • PCI compliance
Trunc Research

Latest log-based threat analysis added.

Contact us!

Do you have an idea for a research that is not here? See something wrong? Contact us at support@noc.org

Tired of price gouging
  • Clear pricing
  • No need to guess
  • Real people
  • Real logging

Simple, Affordable, Log Management and Analysis.

14 days free trial. No credit card required.

Get Started