Checking for 404 errors in your logs can reveal more than just broken links, it can also expose files and URLs that attackers are actively scanning for. To track this behavior, we set up hundreds of honeypots and analyzed live web traffic data, giving us insight into which files and URLs are being targeted across the internet.
The table bellow list the top URLs being scanned on WordPress sites in the past 72 hours. This list of updated daily and shows the top plugins, backdoors and files that attacker are lookin for specifically to WordPress.
| Rank | Scanned URL | Counter |
|---|---|---|
| #1 | /wp-login.php | 22,034 |
| #2 | /wp-content/plugins/hellopress/wp_filemanager.php | 2,312 |
| #3 | /wp-json/gravitysmtp/v1/tests/mock-data | 1,429 |
| #4 | /wp-content/themes/admin.php | 1,310 |
| #5 | /wp-good.php | 1,225 |
| #6 | /wp-content/admin.php | 1,202 |
| #7 | /wp.php | 1,138 |
| #8 | /wp-json/mod/v1/clients/plugins/chQPixpcqq5Vc5UlRMK30vxzC5x2zR1v | 1,126 |
| #9 | /wp-json/mod/v1/clients/themes/chQPixpcqq5Vc5UlRMK30vxzC5x2zR1v | 1,075 |
| #10 | /wp-admin/install.php | 947 |
| #11 | /wp-content/plugins/fix/up.php | 882 |
| #12 | /wp-admin | 859 |
| #13 | /wp-ws68.php | 856 |
| #14 | /wp-admin/js/index.php | 720 |
| #15 | /wp-access.php | 656 |
| #16 | /wp-content/plugins/admin.php | 614 |
| #17 | /wp-trackback.php | 589 |
| #18 | /wp-content/index.php | 582 |
| #19 | /wp-2019.php | 540 |
| #20 | /.well-known/wp-links-opml.php | 525 |
| #21 | /wp-blog.php | 525 |
| #22 | /wordpress | 522 |
| #23 | /wp-content/uploads | 519 |
| #24 | /wp-json/oembed/1.0/embed | 507 |
| #25 | /wp-sigunq.php | 494 |
| #26 | /wp-the.php | 494 |
| #27 | /wp-content/packed.php | 491 |
| #28 | /wp-cron.php | 489 |
| #29 | /wp-plain.php | 485 |
| #30 | /wp | 481 |
| #31 | /.well-known/wp-login.php | 480 |
| #32 | /wp-admin.php | 449 |
| #33 | /wp-admin/js | 442 |
| #34 | /wp-admin/profile.php | 433 |
| #35 | /wp-content/file.php | 429 |
| #36 | /wp-admin/edit.php | 428 |
| #37 | /wp-content/themes/about.php | 425 |
| #38 | /wp-admin/css | 409 |
| #39 | /wp-admin/css/about.php | 408 |
| #40 | /wp-admin/a.php | 407 |
| #41 | /wp-json | 394 |
| #42 | /wp-admin/plugins.php | 389 |
| #43 | /wp-includes/wlwmanifest.xml | 385 |
| #44 | /wp-admin/admin-ajax.php | 384 |
| #45 | /wp-admin/js/widgets | 379 |
| #46 | /wp-mail.php | 371 |
| #47 | /wp-includes/rest-api | 364 |
| #48 | /wp-admin/images | 362 |
| #49 | /wp-json/mod/v1/clients/plugins/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ | 358 |
| #50 | /wp-json/mod/v1/clients/plugins/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR | 350 |
| #51 | /wp-json/mod/v1/clients/themes/j6FbdsfF230jtfGKl2WXTwui8jVLt3uR | 346 |
| #52 | /wp-admin/setup-config.php | 345 |
| #53 | /wp-json/mod/v1/clients/themes/jcdaFPpvQo28KCS7T9Aa6BKXzTwHupSJ | 343 |
| #54 | /wp-admin/css/colors/midnight | 342 |
| #55 | /wp/wp-includes/wlwmanifest.xml | 330 |
| #56 | /web/wp-includes/wlwmanifest.xml | 330 |
| #57 | /wordpress/wp-includes/wlwmanifest.xml | 329 |
| #58 | /wp-content/upgrade/index.php | 325 |
| #59 | /blog/wp-includes/wlwmanifest.xml | 320 |
| #60 | /news/wp-includes/wlwmanifest.xml | 314 |
| #61 | /website/wp-includes/wlwmanifest.xml | 314 |
| #62 | /wp-includes/block-bindings | 313 |
| #63 | /wp-includes/html-api | 302 |
| #64 | /wp-content/themes/seotheme/db.php | 301 |
| #65 | /wp-includes | 301 |
| #66 | /wp-json/mod/v1/clients/plugins/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8 | 300 |
| #67 | /wp-content/themes/pridmag/il.php | 298 |
| #68 | /wp-content/plugins/wp-diambar/includes/loadme.php | 298 |
| #69 | /2019/wp-includes/wlwmanifest.xml | 297 |
| #70 | /wp-json/mod/v1/clients/themes/iHNBUuF2wAFhhJ1LTSZnjkZre9wu6lm8 | 297 |
| #71 | /shop/wp-includes/wlwmanifest.xml | 296 |
| #72 | /wp-content/wp-conflg.php | 291 |
| #73 | /wp-content/plugins/index.php | 290 |
| #74 | /wp-admin/css/colors/modern | 289 |
| #75 | /wp-includes/pomo | 276 |
| #76 | /wp-temp.php | 266 |
| #77 | /wp-admin/network | 266 |
| #78 | /wp-includes/fonts | 264 |
| #79 | /2018/wp-includes/wlwmanifest.xml | 262 |
| #80 | /wp-json/mod/v1/clients/themes/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n | 262 |
| #81 | /wp-json/mod/v1/clients/plugins/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5 | 254 |
| #82 | /wp-json/mod/v1/clients/themes/N6FafVRrjaWL2s4wJW4e71UxELvdDOT5 | 252 |
| #83 | /wp-includes/js/jquery | 251 |
| #84 | /wp-admin/classwithtostring.php | 250 |
| #85 | /wp-includes/images | 249 |
| #86 | /wp-admin/wp.php | 248 |
| #87 | /wp-content | 248 |
| #88 | /wp-includes/block-supports | 248 |
| #89 | /wp-json/mod/v1/clients/plugins/DtvNHI7xP8EXF2FuIDUJit4NDHASlM1n | 245 |
| #90 | /wp-content/cache | 244 |
| #91 | /api/.env/wp-admin/about | 243 |
| #92 | /api/.env/wp-includes/fw | 243 |
| #93 | /api/.env/wp-login | 243 |
| #94 | /api/.env/wp-content/wso | 243 |
| #95 | /api/.env/wp-admin/cloud | 243 |
| #96 | /api/.env/wp-admin/fw | 243 |
| #97 | /api/.env/ALFA_DATA/wp-2019 | 243 |
| #98 | /api/.env/wp-admin/css/colors/coffee/cloud | 243 |
| #99 | /api/.env/wp-includes/class-wp-recovery-mode-cookiie-service | 242 |
| #100 | /api/.env/wp-content/cong | 242 |
| #101 | /api/.env/wp-content/bala | 242 |
| #102 | /api/.env/wp-includes/js/js | 242 |
| #103 | /api/.env/wp-admin/css/fw | 242 |
| #104 | /api/.env/wp-content/plugins/wordpress-three/miin | 242 |
| #105 | /api/.env/wp-content/themes/hello-element/footer | 242 |
| #106 | /wp-admin/images/admin.php | 240 |
| #107 | /wp-editor.php | 237 |
| #108 | /wp-includes/Text/Diff/Engine | 235 |
| #109 | /wp-admin/class-db.php | 230 |
| #110 | /wp-content/themes/index.php | 223 |
| #111 | /wp-admin/css/colors/sunrise | 222 |
| #112 | /wp-settings.php | 221 |
| #113 | /wp-admin/images/file.php | 220 |
| #114 | /wp-Blogs.php | 219 |
| #115 | /wp-admin/product.php | 217 |
| #116 | /wp-content/plugins/sid/sidwso.php | 216 |
| #117 | /wp-includes/ID3 | 214 |
| #118 | /wp-content/plugins/WordPressCore | 213 |
| #119 | /wp-content/mysql.sql | 212 |
| #120 | /wp-admin/css/index.php | 210 |
| #121 | /wp-json/mod/v1/clients/themes/fscdWaebUVLlhlbTrIkh67VC5h0Z42Rv | 209 |
| #122 | /wp-includes/php-compat | 208 |
| #123 | /wp-json/mod/v1/clients/themes/dfH6fTJpNKPXFmf72OBbcx9a6kb73dAu | 206 |
| #124 | /wpc.php | 205 |
| #125 | /wp-blink.php | 204 |
| #126 | /wp-configs.php | 204 |
| #127 | /wp-content/plugins/hello-dolly | 203 |
| #128 | /wp-config.php.backup | 202 |
| #129 | /wp-content/uploads/index.php | 202 |
| #130 | /wp-content/themes | 202 |
| #131 | /wp-content/plugins/ultimate-member | 202 |
| #132 | /api/.env/wp-content/leafmailer2.8 | 201 |
| #133 | /api/.env/wp-admin/js/widgets/moon | 201 |
| #134 | /api/.env/wp-admin/user/moon | 201 |
| #135 | /api/.env/wp-admin/css/leafmailer | 201 |
| #136 | /api/.env/wp-content/upgrade/moon | 201 |
| #137 | /api/.env/wp-content/plugins/moon | 201 |
| #138 | /wp-config.env | 201 |
| #139 | /api/.env/wp-includes/leafmailer | 201 |
| #140 | /api/.env/wp-admin/leafmailer2.8 | 201 |
| #141 | /api/.env/wp-admin/includes/moon | 201 |
| #142 | /wp-load.php | 201 |
| #143 | /wp-includes/fonts/index.php | 200 |
| #144 | /wp-content/upgrade | 200 |
| #145 | /wp-json/mod/v1/clients/plugins/dfH6fTJpNKPXFmf72OBbcx9a6kb73dAu | 200 |
| #146 | /wp-content/plugins/gravityforms | 198 |
| #147 | /wordpress/wp-admin/maint | 198 |
| #148 | /wp-includes/ID3/index.php | 194 |
| #149 | /wp-includes/images/smilies | 194 |
| #150 | /wp-signup.php | 192 |
| #151 | /wp-includes/js/crop | 192 |
| #152 | /wp-admin/network/plugins.php | 189 |
| #153 | /wp-includes/Text/Diff/Engine/about.php | 189 |
| #154 | /wp-json/mod/v1/clients/plugins/BwQrKZus03C3jAUdfG6roDDVrbF67FH1 | 188 |
| #155 | /wp-admin/user/index.php | 187 |
| #156 | /wp-content/languages | 186 |
| #157 | /wp-includes/style-engine | 186 |
| #158 | /wpls.php | 185 |
| #159 | /wp-json/mod/v1/clients/themes/FZkGaHwB4BWyy6F9TfDILZRspdqRBMNq | 185 |
| #160 | /wp-content/plugins/wp-file-manager | 184 |
| #161 | /wp-admin/network/index.php | 182 |
| #162 | /wp-json/mod/v1/clients/plugins/FZkGaHwB4BWyy6F9TfDILZRspdqRBMNq | 181 |
| #163 | /wp-includes/IXR | 180 |
| #164 | /wp-css.php | 180 |
| #165 | /wpx.php | 179 |
| #166 | /wp-includes/PHPMailer | 178 |
| #167 | /wp-json/mod/v1/clients/themes/BwQrKZus03C3jAUdfG6roDDVrbF67FH1 | 177 |
| #168 | /wp-config.php.bak | 176 |
| #169 | /wp-admin/css/colors/coffee | 176 |
| #170 | /wp-home.php | 175 |
| #171 | /wps.php | 175 |
| #172 | /wp-admin/css/colors/ectoplasm | 174 |
| #173 | /wp-json/mod/v1/clients/themes/yQYJEiML0EAKHJ1ba5G863ebauTGL4v6 | 173 |
| #174 | /wp-includes/Requests/Exception | 173 |
| #175 | /wp-content/themes/twentytwentythree | 173 |
| #176 | /wp-logs.php | 172 |
| #177 | /wp-json/mod/v1/clients/themes/HcHF18bVWMtyahnayxBpBFZedqMj1lIT | 171 |
| #178 | /wp-admin/includes | 171 |
| #179 | /wp-content/plugins/akismet | 170 |
| #180 | /wp-content/themes/twentytwentyfour | 169 |
| #181 | /wp-includes/Text/Diff/Renderer | 168 |
| #182 | /wp-json/mod/v1/clients/plugins/6wEtXtfuVruEk1z3TwL7k7lenPpMu8O3 | 167 |
| #183 | /wp-content/plugins/contact-form-7 | 163 |
| #184 | /wp-content/uploads/2018/09/Educac | 162 |
| #185 | /wp-content/plugins/pwnd/pwnd.php | 160 |
| #186 | /wp-admin/includes/about.php | 157 |
| #187 | /wp-json/mod/v1/clients/plugins/HcHF18bVWMtyahnayxBpBFZedqMj1lIT | 157 |
| #188 | /wp/wp-login.php | 157 |
| #189 | /wp-json/mod/v1/clients/themes/6wEtXtfuVruEk1z3TwL7k7lenPpMu8O3 | 156 |
| #190 | /wp-json/mod/v1/clients/plugins/yQYJEiML0EAKHJ1ba5G863ebauTGL4v6 | 154 |
| #191 | /wp-admin/css/colors/blue/index.php | 151 |
| #192 | /wp-content/plugins/yanierin/akcc.php | 150 |
| #193 | /wp-json/mod/v1/clients/themes/5HEdh3eDqs6NhxAvfBJ5bWLGdvzCD248 | 150 |
| #194 | /wp-content/plugins/litespeed-cache | 148 |
| #195 | /wp-json/mod/v1/clients/themes/3Y0UftK4ZgkOOyNentdzLR3O1XCgseZb | 146 |
| #196 | /wp-json/mod/v1/clients/plugins/5HEdh3eDqs6NhxAvfBJ5bWLGdvzCD248 | 146 |
| #197 | /wp-includes/images/media | 144 |
| #198 | /wp-includes/Text | 144 |
| #199 | /wp-admin/maint/index.php | 142 |
| #200 | /wp-config.php | 142 |
| #201 | /wp-json/mod/v1/clients/themes/AF6QHtkifS7afe9hYdSVzYwNUya7Deki | 142 |
| #202 | /wp-content.php.php | 141 |
| #203 | /wp-json/mod/v1/clients/plugins/AF6QHtkifS7afe9hYdSVzYwNUya7Deki | 141 |
| #204 | /wp-json/mod/v1/clients/plugins/3Y0UftK4ZgkOOyNentdzLR3O1XCgseZb | 140 |
| #205 | /wp-content/themes/twentytwenty/404.php | 139 |
| #206 | /wp-api.php | 138 |
| #207 | /wp-admin/file.php | 137 |
| #208 | /wp-admin/options-privacy.php | 137 |
| #209 | /wp-content/uploads/2022/07 | 137 |
| #210 | /wp-json/mod/v1/clients/plugins/fscdWaebUVLlhlbTrIkh67VC5h0Z42Rv | 136 |
| #211 | /wp1/wp-includes/wlwmanifest.xml | 136 |
| #212 | /wp-admin/maint/admin.php | 135 |
| #213 | /wp-contentt.php | 134 |
| #214 | /wp-content/x/index.php | 134 |
| #215 | /wp-includes/js | 131 |
| #216 | /wp-setup.php | 129 |
| #217 | /wp-admin/maint | 128 |
| #218 | /wp/xmlrpc.php | 127 |
| #219 | /wp-wp.php | 127 |
| #220 | /wp-content/cong.php | 127 |
| #221 | /wp-content/plugins/elementor | 127 |
| #222 | /wp5.php | 126 |
| #223 | /wp-content/plugins/apikey/apikey.php | 125 |
| #224 | /wp-json/mod/v1/clients/plugins/dQbiHaYYDAThrFKTMcDQ8bWWiNvx28Yd | 125 |
| #225 | /wp-config-sample.php | 124 |
| #226 | /wp-json/mod/v1/clients/themes/5HmAU7xN6qdUl3VpoGsirSopze0t5F2E | 124 |
| #227 | /wp-admin/images/moon.php | 123 |
| #228 | /wp-admin/css/colors | 122 |
| #229 | /wp-includes/style-engine/index.php | 121 |
| #230 | /wp-json/mod/v1/clients/themes/O8IPZVSpWRsNUvKGmp6tCOXPEc5pwzOf | 120 |
| #231 | /wp-is.php | 118 |
| #232 | /wordpress/xmlrpc.php | 118 |
| #233 | /wp-content/uploads/goods.php | 117 |
| #234 | /wp-content/1.php | 116 |
| #235 | /wp-json/mod/v1/clients/themes/dQbiHaYYDAThrFKTMcDQ8bWWiNvx28Yd | 116 |
| #236 | /wordpress/wp-login.php | 115 |
| #237 | /wp-includes/SimplePie/admin.php | 115 |
| #238 | /wp-includes/style-engine/autoload_classmap.php | 115 |
| #239 | /wp-includes/images/smilies/about.php | 115 |
| #240 | /wp-admin/css/colors/index.php | 113 |
| #241 | /wp-json/mod/v1/clients/plugins/O8IPZVSpWRsNUvKGmp6tCOXPEc5pwzOf | 113 |
| #242 | /wp-json/mod/v1/clients/plugins/5HmAU7xN6qdUl3VpoGsirSopze0t5F2E | 112 |
| #243 | /wp-includes/css | 110 |
| #244 | /wp-admin/images/index.php | 109 |
| #245 | /wp-admin/css/colors/coffee/index.php | 109 |
| #246 | /wp-includes/Requests/library/index.php | 108 |
| #247 | /wp-includes/js/tinymce/plugins/compat3x/css | 108 |
| #248 | /wp-includes/IXR/index.php | 107 |
| #249 | /wp-content/plugins/apikey/apikey.php.suspected | 106 |
| #250 | /wp-includes/blocks/shortcode/index.php | 106 |
| #251 | /wp-content/themes/alera/alpha.php | 103 |
| #252 | /wp-includes/js/plupload | 102 |
| #253 | /wp-includes/sitemaps | 101 |
| #254 | /wp-content/video | 100 |
| #255 | /wp-json/batch/v1 | 99 |
| #256 | /test/wp-includes/wlwmanifest.xml | 99 |
| #257 | /wp-json/mod/v1/clients/plugins/222SatWljlPjOcZ6sbz9QrN2P7tPZ7fEhaw111 | 99 |
| #258 | /wp-aa.php | 98 |
| #259 | /wp-includes/assets/index.php | 98 |
| #260 | /wp-json/mod/v1/clients/themes/222SatWljlPjOcZ6sbz9QrN2P7tPZ7fEhaw111 | 98 |
| #261 | /wp-verb.php | 97 |
| #262 | /wp-includes/widgets | 96 |
| #263 | /wp-site/xmlrpc.php | 94 |
| #264 | /wp-content/worksec.php | 92 |
| #265 | /wp-content/themes/Divi/404.php | 92 |
| #266 | /wp-admin/index.php | 92 |
| #267 | /wp-json/mod/v1/clients/plugins/05vGe5gkXFz21jMq7UqIqPWMZUjKB2jv | 92 |
| #268 | /wp-json/mod/v1/clients/plugins/Jowup0YjuyoFl8756PugwrEu8CEOb7W | 92 |
| #269 | /wp-content/plugins/pwnd-1/pwnd.php | 91 |
| #270 | /wper.php | 90 |
| #271 | /wp-json/mod/v1/clients/themes/05vGe5gkXFz21jMq7UqIqPWMZUjKB2jv | 90 |
| #272 | /wp-json/mod/v1/clients/themes/Jowup0YjuyoFl8756PugwrEu8CEOb7W | 90 |
| #273 | /wp-includes/assets | 88 |
| #274 | /cms/wp-includes/wlwmanifest.xml | 88 |
| #275 | /wp2/wp-includes/wlwmanifest.xml | 88 |
| #276 | /wp-content/ai1wm-backups/about.php | 88 |
| #277 | /wp-includes/IXR/wp-login.php | 87 |
| #278 | /wp-content/uploads/admin.php | 87 |
| #279 | /site/wp-includes/wlwmanifest.xml | 87 |
| #280 | /wp-admin/radio.php | 87 |
| #281 | /wp-content/themes/twentynineteen/404.php | 86 |
| #282 | /blog/wp-login.php | 86 |
| #283 | /wp-json/wp/v2/posts | 86 |
| #284 | /wp-admin/includes/rk2.php | 86 |
| #285 | /wp-admin/css/colors/ocean | 85 |
| #286 | /wp-json/wp/v2/users | 84 |
| #287 | /wp-comments-post.php | 83 |
| #288 | /wp-includes/ID3/about.php | 83 |
| #289 | /wp-includes/js/tinymce/themes | 83 |
| #290 | /wp-includes/js/tinymce/skins | 83 |
| #291 | /wp-includes/js/tinymce/plugins | 83 |
| #292 | /wp-includes/js/tinymce | 83 |
| #293 | /wp-includes/js/thickbox | 83 |
| #294 | /wp-content/themes/twentythirteen | 83 |
| #295 | /wpsite/xmlrpc.php | 82 |
| #296 | /wp-content/languages/themes | 82 |
| #297 | /wp-content/languages/plugins | 82 |
| #298 | /wp-json/mod/v1/clients/plugins/V6iFixghYnO204YhIOPgWPf66DtcI9pB | 80 |
| #299 | /wp-admin/js/wp-conflg.php | 80 |
| #300 | /wp-index.php | 79 |
| #301 | /wp-content/themes/twentytwentyone/404.php | 79 |
| #302 | /appWP/lab/wp-admin/css/colors/blue/blue.php | 79 |
| #303 | /sito/wp-includes/wlwmanifest.xml | 78 |
| #304 | /wp-content/plugins/burst-statistics | 77 |
| #305 | /wp-json/mod/v1/clients/plugins/Rw3ntZOSgnzAowBha1RvN3pidNBOtirn | 77 |
| #306 | /wp-json/jwt-auth/v1/token | 77 |
| #307 | /wp-json/buddypress/v1/members | 76 |
| #308 | /wp-json/mod/v1/clients/themes/XbPUmQItjloTIWA6BLYFIH9kLKopOaPg | 75 |
| #309 | /wp-json/mod/v1/clients/themes/Rw3ntZOSgnzAowBha1RvN3pidNBOtirn | 75 |
| #310 | /cms/wp-login.php | 74 |
| #311 | /wp-json/ldlms/v2/users | 74 |
| #312 | /wp-json/mod/v1/clients/plugins/ONuzMxjdNPxyYeJ0aUBKgu8Ty4SKMUmS | 74 |
| #313 | /wp-json/mod/v1/clients/themes/ZWakYegubtjlA3s4sb8hTWhpvsrJspBn | 74 |
| #314 | /wp-json/mod/v1/clients/themes/V6iFixghYnO204YhIOPgWPf66DtcI9pB | 73 |
| #315 | /wp-json/mod/v1/clients/themes/ONuzMxjdNPxyYeJ0aUBKgu8Ty4SKMUmS | 73 |
| #316 | /wp-json/mod/v1/clients/plugins/XbPUmQItjloTIWA6BLYFIH9kLKopOaPg | 73 |
| #317 | /wp-json/mod/v1/clients/themes/iuyhN4wenVAqT45GUz5UTZJS7XwKw1a8 | 73 |
| #318 | /wp-includes/assets/autoload_classmap.php | 73 |
| #319 | /wp-includes/sitemaps/providers | 72 |
| #320 | /wp-json/mod/v1/clients/themes/CLRf7dnhYcSQCsPgbMHJN7WIlRdNN9Vx& | 72 |
| #321 | /wp-json/mod/v1/clients/plugins/iuyhN4wenVAqT45GUz5UTZJS7XwKw1a8 | 72 |
| #322 | /wp-json/mod/v1/clients/plugins/CLRf7dnhYcSQCsPgbMHJN7WIlRdNN9Vx& | 71 |
| #323 | /wp-links-opml.php | 70 |
| #324 | /wp-includes/blocks/comments | 70 |
| #325 | /wp-links.php | 69 |
| #326 | /wp-json/mod/v1/clients/plugins/ZWakYegubtjlA3s4sb8hTWhpvsrJspBn | 69 |
| #327 | /wp-content/about.php | 68 |
| #328 | /wp-admin/js/widgets/index.php | 67 |
| #329 | /wp-includes/Text/index.php | 67 |
| #330 | /wp-json/mod/v1/clients/themes/3JXCfGRXIxd39HlafutMfhsFU2FXVEQT | 67 |
| #331 | /wp-includes/customize/index.php | 66 |
| #332 | /wp-includes/SimplePie/index.php | 66 |
| #333 | /wp-includes/fonts/admin.php | 66 |
| #334 | /wp-content/txets.php | 65 |
| #335 | /wp-json/mod/v1/clients/themes/f6LxHcsycGbkduD4Ey6xWU3BavKbiJQf | 64 |
| #336 | /wp-json/mod/v1/clients/themes/cpxRPWj6yF4TpeAoBXmhR7WZUaCmPMAu | 64 |
| #337 | /wp-content/plugins/classic-editor | 64 |
| #338 | /wp-admin/txets.php | 63 |
| #339 | /wp-includes/images/crystal | 62 |
| #340 | /wp-admin/css/colors/blue | 62 |
| #341 | /wp-json/mod/v1/clients/themes/WQCDRU8YUI6gRfV3oHWvpg75CcSGXNlS | 62 |
| #342 | /wp-admin/maint/about.php | 62 |
| #343 | /wp-includes/Text/about.php | 60 |
| #344 | /wp-json/mod/v1/clients/plugins/AVrzZ53ziRyZEhVINNEiHcUOgJbgJrOP | 60 |
| #345 | /wp-includes/Text/Diff | 59 |
| #346 | /wp-includes/index.php | 59 |
| #347 | /wp-content.php | 59 |
| #348 | /wp-json/wc/v3/customers | 59 |
| #349 | /wp-json/mod/v1/clients/plugins/Jhm4tTkGZ6DnIQ9DH0NBwzo5Js7lZpjJ | 59 |
| #350 | /wp-includes/Requests/library | 58 |
| #351 | /wp-json/mod/v1/clients/themes/AVrzZ53ziRyZEhVINNEiHcUOgJbgJrOP | 58 |
| #352 | /wp-json/mod/v1/clients/plugins/c3L4IN42483iivd597Lm4SwQHKdAARSF | 58 |
| #353 | /wp-json/mod/v1/clients/plugins/Eco@2024redacao | 58 |
| #354 | /wp-json/mod/v1/clients/themes/j5j1mBUW36fYRa4rNwxZ2J9fU96pcDLi | 58 |
| #355 | /media/wp-includes/wlwmanifest.xml | 57 |
| #356 | /wp-includes/css/dist | 57 |
| #357 | /wp-json/mod/v1/clients/plugins/cpxRPWj6yF4TpeAoBXmhR7WZUaCmPMAu | 57 |
| #358 | /wp-json/mod/v1/clients/themes/Jhm4tTkGZ6DnIQ9DH0NBwzo5Js7lZpjJ | 57 |
| #359 | /wp-json/mod/v1/clients/themes/c3L4IN42483iivd597Lm4SwQHKdAARSF | 57 |
| #360 | /wp-json/mod/v1/clients/themes/Z2bUgdmzIeBDP9P4wJYvQDU61h2r08B5 | 56 |
| #361 | /wp-json/mod/v1/clients/plugins/21nR8ayel10Xs5W8b3zuseX8hhKZBeIU | 56 |
| #362 | /wp-json/mod/v1/clients/themes/0yDQuup9r6D6j34fr24Iw29a6403UW2h | 56 |
| #363 | /wp-json/mod/v1/clients/plugins/0yDQuup9r6D6j34fr24Iw29a6403UW2h | 56 |
| #364 | /wp-json/mod/v1/clients/themes/Eco@2024redacao | 55 |
| #365 | /wp-json/mod/v1/clients/plugins/j5j1mBUW36fYRa4rNwxZ2J9fU96pcDLi | 55 |
| #366 | /wp-config.php-backup | 54 |
| #367 | /wp-json/mod/v1/clients/plugins/Z2bUgdmzIeBDP9P4wJYvQDU61h2r08B5 | 54 |
| #368 | /wp-json/mod/v1/clients/plugins/3JXCfGRXIxd39HlafutMfhsFU2FXVEQT | 54 |
| #369 | /wp-json/mod/v1/clients/plugins/HEmeTPzKNxcA6QrjqvS8lZTHNHXnvODG | 54 |
| #370 | /wp-json/mod/v1/clients/themes/HEmeTPzKNxcA6QrjqvS8lZTHNHXnvODG | 54 |
| #371 | /wp-json/mod/v1/clients/plugins/3nga0rgfCeRg8PAeays0iW5lEkKWYWmR | 54 |
| #372 | /wp-json/mod/v1/clients/themes/3nga0rgfCeRg8PAeays0iW5lEkKWYWmR | 54 |
| #373 | /wp-json/mod/v1/clients/themes/ovXW4MtEMO85ttd7jLqMNpqkpZzem5GU | 53 |
| #374 | /wp-json/learnpress/v1/users | 53 |
| #375 | /wp-includes/blocks/gallery/index.php | 53 |
| #376 | /wp-json/mod/v1/clients/plugins/f6LxHcsycGbkduD4Ey6xWU3BavKbiJQf | 53 |
| #377 | /wp-json/mod/v1/clients/themes/21nR8ayel10Xs5W8b3zuseX8hhKZBeIU | 52 |
| #378 | /wp-includes/blocks/block | 51 |
| #379 | /wp-json/mod/v1/clients/themes/aKd62QRcpOxsok9TCvsoU5g1O7uceEoc | 51 |
| #380 | /wp-json/mod/v1/clients/plugins/VZ85UJFpDj5Slc4y58sEd1GthOxDdym7 | 51 |
| #381 | /wp-file.php | 50 |
| #382 | /wp-json/tutor/v1/students | 50 |
| #383 | /wp-json/mod/v1/clients/plugins/avzAHvAq30wabzn8dLwFQjchoDcGX8SB | 50 |
| #384 | /wp-json/mod/v1/clients/plugins/bfbIkKVSS5LldverxXqVpLHElH8wrHad | 50 |
| #385 | /wp-blog-header.php | 49 |
| #386 | /wp-json/mod/v1/clients/plugins/EXlALfpa94WUCwR62KMMOijmTnSUaZAR | 49 |
| #387 | /wp-json/mod/v1/clients/plugins/MqLhvn8UBR1uXyV1Pcn6jgDO3CE7v9fV | 49 |
| #388 | /wp-json/mod/v1/clients/themes/MqLhvn8UBR1uXyV1Pcn6jgDO3CE7v9fV | 49 |
| #389 | /wp-json/mod/v1/clients/themes/avzAHvAq30wabzn8dLwFQjchoDcGX8SB | 49 |
| #390 | /wp-content/themes/style.php | 48 |
| #391 | /wp-content/style.php | 48 |
| #392 | /wp-content/plugins/hellopress/wp_mna.php | 48 |
| #393 | /wp-json/buddyboss/v1/members | 48 |
| #394 | /wp-json/mod/v1/clients/plugins/0akdoZKw0V704BT9h09I1ht5DAzjJxrh | 48 |
| #395 | /wp-json/mod/v1/clients/themes/Man7Yohmbyy9jGkwxcQAJCFyO9lHhO0R | 48 |
| #396 | /wp-json/mod/v1/clients/themes/icYJKNgRTQxWA3VDk3nxsbalFkED0pkQ | 48 |
| #397 | /wp-json/mod/v1/clients/themes/rlWcdsGLFmnLxVAJljed65AAhcUcancE | 48 |
| #398 | /wp-json/mod/v1/clients/plugins/KJS6LzURSzH0UeiAMKIlCcwjdGJBLv%20EC | 48 |
| #399 | /wp-includes/l10n | 47 |
| #400 | /wp-json/wc/v3 | 47 |
| #401 | /wp-json/mod/v1/clients/plugins/KKFwdZ4dVQkr9uv3A7G8Vu4LfpT0noFh& | 47 |
| #402 | /wp-json/mod/v1/clients/themes/EXlALfpa94WUCwR62KMMOijmTnSUaZAR | 47 |
| #403 | /wp-json/mod/v1/clients/plugins/rlWcdsGLFmnLxVAJljed65AAhcUcancE | 47 |
| #404 | /wp-json/mod/v1/clients/themes/KJS6LzURSzH0UeiAMKIlCcwjdGJBLv%20EC | 47 |
| #405 | /wp-json/ultimate-member/v1/users | 46 |
| #406 | /wp-content/plugins/about.php | 46 |
| #407 | /wp-json/mod/v1/clients/plugins/aKd62QRcpOxsok9TCvsoU5g1O7uceEoc | 46 |
| #408 | /wp-json/mod/v1/clients/themes/viVQmK4AZtAdqMCJJuMNDUR22nP517Fw | 46 |
| #409 | /wp-includes/Requests | 45 |
| #410 | /wp-includes/blocks/audio | 45 |
| #411 | /wp-includes/blocks/details | 45 |
| #412 | /wp-includes/blocks/post-comments-form | 45 |
| #413 | /wp-includes/sodium_compat | 45 |
| #414 | /wp_wol.php | 45 |
| #415 | /wp-json/bbp-api/v1/users | 45 |
| #416 | /wp-includes/Requests/src/Response/about.php | 45 |
| #417 | /wp-json/mod/v1/clients/themes/Wb9GG9eodB86eYOGTeEvFVGGKvrW6s3D | 45 |
| #418 | /wp-json/mod/v1/clients/themes/0akdoZKw0V704BT9h09I1ht5DAzjJxrh | 44 |
| #419 | /wp-json/mod/v1/clients/themes/jN3acTYXon22HxMpLcgL0NjvFMqRnd6ojN3acTYXon22HxMpLcgL0NjvFMqRnd6o | 44 |
| #420 | /wp-json/mod/v1/clients/plugins/wJhaBobKxXGCxoZ9tjv2rbSzaMQQxAPc | 44 |
| #421 | /wp-content/themes/twentytwentyfour/index.php | 44 |
| #422 | /wp-config.php.old | 43 |
| #423 | /wp-json/mod/v1/clients/plugins/icYJKNgRTQxWA3VDk3nxsbalFkED0pkQ | 43 |
| #424 | /wp-json/mod/v1/clients/plugins/ovXW4MtEMO85ttd7jLqMNpqkpZzem5GU | 42 |
| #425 | /wp-login | 42 |
| #426 | /wp-json/rankmath/v1/getHead | 42 |
| #427 | /wp-json/mod/v1/clients/plugins/WQCDRU8YUI6gRfV3oHWvpg75CcSGXNlS | 42 |
| #428 | /wp-json/mod/v1/clients/plugins/Xtv6QxBWpN8VMqUxsfMbwBX3KJhi3Uyv | 42 |
| #429 | /wp-json/mod/v1/clients/themes/Xtv6QxBWpN8VMqUxsfMbwBX3KJhi3Uyv | 42 |
| #430 | /wp-json/mod/v1/clients/plugins/KXGPNczDnoSQHyQdSPIyYq8JitrjK3tZ | 42 |
| #431 | /wp-json/mod/v1/clients/plugins/Man7Yohmbyy9jGkwxcQAJCFyO9lHhO0R | 42 |
| #432 | /wp-json/mod/v1/clients/themes/SS8ZnIYL1VVqlsyA6nAFSZHA8f8pgqrv | 42 |
| #433 | /wp-includes/customize | 42 |
| #434 | /wp-json/mod/v1/clients/themes/bfbIkKVSS5LldverxXqVpLHElH8wrHad | 42 |
| #435 | /wp-json/mod/v1/clients/plugins/jN3acTYXon22HxMpLcgL0NjvFMqRnd6ojN3acTYXon22HxMpLcgL0NjvFMqRnd6o | 42 |
| #436 | /wp-includes/PHPMailer/admin.php | 41 |
| #437 | /wp-includes/admin.php | 41 |
| #438 | /wp-ws38.php | 41 |
| #439 | /wp-admin/style.php | 41 |
| #440 | /2020/wp-includes/wlwmanifest.xml | 41 |
| #441 | /wp-json/mod/v1/clients/themes/VZ85UJFpDj5Slc4y58sEd1GthOxDdym7 | 41 |
| #442 | /nsite/wp-login.php | 41 |
| #443 | /wp-includes/images/wp-login.php | 41 |
| #444 | /wp-content/uploads/2024/index.php | 41 |
| #445 | /wp-json/mod/v1/clients/plugins/viVQmK4AZtAdqMCJJuMNDUR22nP517Fw | 41 |
| #446 | /wp-json/mod/v1/clients/themes/wJhaBobKxXGCxoZ9tjv2rbSzaMQQxAPc | 41 |
| #447 | /wp-json/mod/v1/clients/plugins/Wb9GG9eodB86eYOGTeEvFVGGKvrW6s3D | 41 |
| #448 | /wp-content/radio.php | 40 |
| #449 | /wp-json/mepr/v1/members | 40 |
| #450 | /wp-json/mod/v1/clients/plugins/SS8ZnIYL1VVqlsyA6nAFSZHA8f8pgqrv | 40 |
| #451 | /wp-json/mod/v1/clients/themes/KKFwdZ4dVQkr9uv3A7G8Vu4LfpT0noFh& | 40 |
| #452 | /wp-includes/SimplePie | 40 |
| #453 | /wp-sitemap.xml | 39 |
| #454 | /wp-includes/theme-compat | 39 |
| #455 | /wplog.php | 38 |
| #456 | /wp-seo.php | 38 |
| #457 | /wp-sing.php | 38 |
| #458 | /wp-json/mod/v1/clients/plugins/FgsSSYYGySgcAmtLUgC9B49x38hilYlO | 38 |
| #459 | /wp-error_log.php | 37 |
| #460 | /wp-json/wc/v2/customers | 37 |
| #461 | /wp-signin.php | 36 |
| #462 | /wp-json/wp/v2/give_forms | 36 |
| #463 | /wp-json/mod/v1/clients/themes/FgsSSYYGySgcAmtLUgC9B49x38hilYlO | 36 |
| #464 | /wp-json/mod/v1/clients/plugins/hichKZLq7bule0RccwAt58lWc6sinboC | 35 |
| #465 | /wp-json/mod/v1/clients/themes/hichKZLq7bule0RccwAt58lWc6sinboC | 35 |
| #466 | /wp-includes/ID3/admin.php | 35 |
| #467 | /wp-json/mod/v1/clients/plugins/yzpX4PF1C5aMoiBQ3HkFVrmR4tGkhmFK | 34 |
| #468 | /wp-aaa.php | 34 |
| #469 | /wp-admin/wp-conflg.php | 34 |
| #470 | /wp-json/ymc/v1/posts/filter | 33 |
| #471 | /wp-mt.php | 33 |
| #472 | /wp-json/pys-facebook/v1/event | 33 |
| #473 | /wp-json/mod/v1/clients/themes/yzpX4PF1C5aMoiBQ3HkFVrmR4tGkhmFK | 33 |
| #474 | /wp-json/mod/v1/clients/themes/XsA9rN4rorpeh6NU6GIxmYx5DNvI3Ml0 | 33 |
| #475 | /wp-json/mod/v1/clients/plugins/M496uloR6zX70brKZmBZXIf0vrlDQ1Ws | 33 |
| #476 | /wp-tot.php | 32 |
| #477 | /wp-content/themes/travel/issue.php | 32 |
| #478 | /wp-json/blockli/v1/blockli-podcast-settings | 32 |
| #479 | /wp-json/mod/v1/clients/plugins/XsA9rN4rorpeh6NU6GIxmYx5DNvI3Ml0 | 32 |
| #480 | /wp-json/mod/v1/clients/themes/xax0IOMHNHpxNSGJz7vh0VwRH8GBFVvy | 32 |
| #481 | /wp-json/mod/v1/clients/plugins/xax0IOMHNHpxNSGJz7vh0VwRH8GBFVvy | 32 |
| #482 | /wp-json/mod/v1/clients/plugins/pzxUa0wlldzfNBfyp1S6guK82wZME7zy | 32 |
| #483 | /wp-json/mod/v1/clients/themes/pzxUa0wlldzfNBfyp1S6guK82wZME7zy | 32 |
| #484 | /wp-json/mod/v1/clients/plugins/aCw4ooZTYjlI7VP6FdJrAavPJ9zvBxFW | 32 |
| #485 | /wp-json/mod/v1/clients/plugins/WD6DEBrLdGDYH2z7z5hTTMbpaHsE3Dnb | 31 |
| #486 | /wp-content/lock360.php | 31 |
| #487 | /wp-json/intercom/v1/webhook | 31 |
| #488 | /wp-trc.php | 30 |
| #489 | /wp-json/wc/v1/customers | 30 |
| #490 | /wp-p.php7 | 30 |
| #491 | /wordpress/wp-admin/setup-config.php | 30 |
| #492 | /wp-includes/PHPMailer/index.php | 30 |
| #493 | /wp-json/mod/v1/clients/plugins/vStRbE73YIbSXyinL0UEnuVbELg9KJck& | 30 |
| #494 | /wp-json/mod/v1/clients/themes/vStRbE73YIbSXyinL0UEnuVbELg9KJck& | 30 |
| #495 | /wp-json/wp-block-editor/v1/members | 29 |
| #496 | /wp-includes/block-supports/index.php | 29 |
| #497 | /wp-includes/block-bindings/index.php | 29 |
| #498 | /wp-json/mod/v1/clients/themes/91YaxzkObEww6NqSkMdUP3adS30vlm4g | 29 |
| #499 | /wp-json/mod/v1/clients/themes/aCw4ooZTYjlI7VP6FdJrAavPJ9zvBxFW | 29 |
| #500 | /wp-json/mod/v1/clients/themes/2pX9R0MWvdKEcTXPTj1qp3bxJe5i4rxN | 29 |
Data was last updated on: Aug 15, 2026
We love logs. In this section we will share some of the data we are parsing from our logs and honeypots we have live.
Logging for fun and a good night of sleep.
Latest log-based threat analysis added.
Do you have an idea for a research that is not here? See something wrong? Contact us at support@noc.org
14 days free trial. No credit card required.