New paths scanned

Problem/Motivation

Since the last release in January 2020, new paths are getting scanned, like the ones below. You can copy and paste them in the bottom of the "path2ban options" > "List of restricted paths" window (/admin/config/people/path2ban) to include them:

• 01.php
• 02.php
• 0z.php
• 1.php
• 1337.php
• 1h6j5.php
• 1index.php
• 2index.php
• 3index.php
• 3x.php
• 403.php
• 404.php
• 444.php
• 4price.php
• 504.php
• about.php
• about.php7
• admin-post.php
• admin.php
• admin/controller/extension/wpm.php
• adminfuns.php7
• ajax-actions.php
• alfa-rex.php7
• alfa-rex2.php7
• alfa.php
• ALFA_DATA/alfacgiapi/ups.php
• alfanew.php
• alfanew.php7
• alfanew2.php7
• autoload_classmap.php
• baindex.php
• C.php
• cache-compat.php
• ccx/index.php
• cgi-bin/xmrlpc.php
• cjfuns.php
• crypted.php
• css/4O4.php
• css/index.php
• css/xmrlpc.php
• defaul1.php
• DKIZ.php
• doc.php
• dropdown.php
• ebs.php7
• fw.php
• good.php
• google.php
• haxor.php
• hehe.php
• image/screenshot_1.php
• images/mar.php
• images/vuln.php
• images/wp-2019.php
• images/xmrlpc.php
• img/xmrlpc.php
• ini.php
• inputs.php
• ioxi-rex4.php7
• lock360.php
• lufix.php
• mad.php
• marijuana.php
• mass.php
• media-admin.php
• mini.php
• mininew.php
• new-index.php
• old-index.php
• payout.php
• phpinfo.php
• pi.php
• priv8.php
• R00T.php
• radio.php
• reminder.php
• repeater.php
• screenshot_1.php
• shell.php
• simple.php
• sites/default/files/accesson.php
• small.php
• srx.php
• up-kon.php
• up.php
• upload.php
• uploads/up.php
• uploads/xleet.php
• ups.php
• utchiha.php
• vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
• wikindex.php
• ws.php7
• wso112233.php
• xmrlpc.php
• yanz.php

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes