Bots and scanners

9 November 2026

Why your site gets .env and wp-login probes, and what to do about them

Automated scanners ask every website for config files and WordPress login pages, whatever it runs. Why it happens, and the simple steps that make it harmless.