# The keep is closed to these paths. Bots that enter anyway are reported.
User-agent: *
Disallow: /wp-login.php
Disallow: /wp-admin/
Disallow: /xmlrpc.php
Disallow: /wp-config.php
Disallow: /.env
Disallow: /.git/
Disallow: /.aws/
Disallow: /phpmyadmin/
Disallow: /pma/
Disallow: /myadmin/
Disallow: /actuator/
Disallow: /admin
Disallow: /administrator
Disallow: /cgi-bin/
Disallow: /server-status
Disallow: /backup.
Disallow: /db.
Disallow: /site.
Disallow: /www.
Disallow: /config.json
Disallow: /settings.json
Disallow: /secrets.json
Disallow: /credentials.json
Disallow: /secret-vault/
Disallow: /keep-records/
Disallow: /remote/
Disallow: /global-protect/
Disallow: /ssl-vpn/
Disallow: /dana-na/
Disallow: /vpn/
Disallow: /sslvpn
Disallow: /owa/
Disallow: /ecp/
Disallow: /*.php
Disallow: /*.asp
Disallow: /*.aspx
Disallow: /*.jsp
Disallow: /*.cgi