Ban Hackers

Back in the day, hackers were unemployed or unemployable programmers or teenagers with nothing to do.
Now days, it's criminal organizations and Programmers (with a capital P) with masters degrees hired by foreign (and not so foreign) governments to hack into every server they can find. They even try to scan every possible IP address for web servers. When they find one, somebody later tries to hack it.
So, I set up a website for them to visit. It says Coming Soon.
Then, it records their IP Address and bans it from the server with iptables. It also adds their IP Address and User Agent string to the database.

Here are the IP addresses I've banned over the last week:
BannedID IP User Agent String Date Hacked Banned Reason
7437918.97.26.3Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3061.65 Safari/537.324/20/2026 09:06:55 PMTried to access http ip directly.
7437885.217.149.39Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4/20/2026 05:48:30 PMTried to access http ip directly.
74377138.68.28.146Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/538.41 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.364/20/2026 05:17:22 PMTried to access http ip directly.
74376217.15.165.251Go-http-client/1.14/20/2026 04:55:54 PMTried to access http ip directly.
74375195.178.110.34Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.04/20/2026 04:05:28 PMEvil 404 /wp-content/plugins/elementor-pro/assets/js/woocom
74374107.174.52.83Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364/20/2026 02:18:57 PMEvil 404 .env (AWS vulnerability)
7437383.27.84.13Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.364/20/2026 02:18:05 PMTried to access http ip directly.
74372205.185.118.173Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364/20/2026 01:56:50 PMEvil 404 /wp-login.php
74371165.154.51.221Mozilla/5.0 (Macintosh; Intel Mac OS X 9_0_2) AppleWebKit/597.35 (KHTML, like Gecko) Chrome/74.0.802 Safari/537.364/20/2026 01:25:43 PMTried to access http ip directly.
74370173.212.216.253libredtail-http4/20/2026 12:13:25 PMTried to access http ip directly.
7436918.215.169.92Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/20/2026 12:03:15 PMTried to access http ip directly.
74368157.15.40.40Go-http-client/1.14/20/2026 11:39:43 AMEvil 404 /wp-content/w3tc-config/master-preview.php
74367161.178.139.119Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko/20100101 Firefox/123.04/20/2026 10:37:02 AMEvil 404 .env (AWS vulnerability)
743668.211.5.31curl/7.64.14/20/2026 09:29:22 AMTried to access http ip directly.
74365165.154.42.209curl/7.29.04/20/2026 06:21:29 AMTried to access http ip directly.
7436445.55.80.228Mozilla/5.04/20/2026 04:10:31 AMEvil 404 /wp-login.php
7436398.159.37.102Go-http-client/1.14/20/2026 03:53:55 AMEvil 404 /wp-includes/css/buttons.css
74362185.241.208.115Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364/20/2026 03:13:22 AMEvil 404 .env (AWS vulnerability)
74361165.154.182.6Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:137.0) Gecko/20100101 Firefox/137.04/20/2026 02:05:16 AMTried to access http ip directly.
74360152.32.235.160curl/7.29.04/20/2026 12:38:34 AMTried to access http ip directly.
7435961.184.87.135Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.364/19/2026 11:09:48 PMTried to access http ip directly.
74358104.248.79.109Mozilla/5.04/19/2026 10:51:07 PMEvil 404 /wp-login.php
74357193.124.20.247Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/19/2026 05:54:23 PMTried to access http ip directly.
7435645.148.10.238Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/19/2026 05:18:36 PMEvil 404 .env (AWS vulnerability)
74355207.244.227.110libredtail-http4/19/2026 04:40:06 PMTried to access http ip directly.
74354193.124.20.244Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/19/2026 04:35:15 PMTried to access http ip directly.
7435366.132.224.81Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/19/2026 03:52:56 PMTried to access http ip directly.
7435246.101.166.128Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)4/19/2026 03:41:49 PMTried to access http ip directly.
74351104.248.27.192Go-http-client/1.14/19/2026 03:41:49 PMEvil 404 /cgi-bin/authLogin.cgi
74350209.38.211.125Go-http-client/1.14/19/2026 03:41:49 PMEvil 404 /solr/admin/info/system
74349147.185.133.105Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/19/2026 02:57:10 PMTried to access http ip directly.
74348195.178.110.101Mozilla/5.0 (compatible; SecurityScanner/1.0)4/19/2026 02:12:10 PMEvil 404 .env (AWS vulnerability)
74347152.32.247.22Mozilla/5.0 (Windows NT 8_2_1; Win64; x64) AppleWebKit/595.51 (KHTML, like Gecko) Chrome/53.0.1663 Safari/537.364/19/2026 11:13:26 AMTried to access http ip directly.
74346107.173.37.85libredtail-http4/19/2026 09:19:14 AMTried to access http ip directly.
74345193.176.31.158Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/19/2026 06:40:52 AMTried to access http ip directly.
74344185.227.153.151libredtail-http4/19/2026 06:01:06 AMTried to access http ip directly.
7434313.89.125.226Mozilla/5.0 zgrab/0.x4/19/2026 05:28:16 AMUser Agent Mozilla/5.0 zgrab/0.x
74342124.198.131.162Mozilla/5.0 (adaptive-bot)4/19/2026 05:23:50 AMEvil 404 .env (AWS vulnerability)
7434185.239.35.153Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.154/19/2026 04:58:21 AMTried to access http ip directly.
7434094.26.106.206libredtail-http4/19/2026 03:28:57 AMTried to access http ip directly.
74339159.203.38.69Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.364/19/2026 01:44:21 AMTried to access http ip directly.
74338165.154.51.225curl/7.29.04/19/2026 12:58:18 AMTried to access http ip directly.
74337193.124.20.252Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/19/2026 12:50:13 AMTried to access http ip directly.
74336190.97.238.74libredtail-http4/19/2026 12:33:35 AMTried to access http ip directly.
74335195.184.76.168Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.04/19/2026 12:31:18 AMTried to access http ip directly.
74334152.32.206.74curl/7.29.04/18/2026 11:51:34 PMTried to access http ip directly.
7433340.124.173.115Mozilla/5.0 zgrab/0.x4/18/2026 11:07:43 PMTried to access http ip directly.
7433234.14.59.22python-requests/2.32.54/18/2026 10:50:53 PMTried to access http ip directly.
74331165.154.135.215curl/7.29.04/18/2026 10:19:13 PMTried to access http ip directly.
74330152.32.245.186curl/7.29.04/18/2026 08:26:09 PMTried to access http ip directly.
74329165.154.36.105Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/561.49 (KHTML, like Gecko) Chrome/93.0.212 Safari/537.364/18/2026 08:24:38 PMTried to access http ip directly.
74328103.25.231.252curl/7.81.04/18/2026 07:36:39 PMTried to access http ip directly.
74327103.134.117.23Go-http-client/1.14/18/2026 07:10:51 PMTried to access http ip directly.
74326147.185.132.143Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/18/2026 06:23:11 PMTried to access http ip directly.
7432585.217.149.55Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4/18/2026 05:36:01 PMTried to access http ip directly.
7432413.60.168.56Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.364/18/2026 05:33:37 PMEvil 404 .env (AWS vulnerability)
7432391.196.152.60Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.04/18/2026 04:41:18 PMTried to access http ip directly.
7432266.132.195.82Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/18/2026 03:42:54 PMTried to access http ip directly.
74321118.193.56.229curl/7.29.04/18/2026 02:33:56 PMTried to access http ip directly.
74320212.47.78.123Go-http-client/1.14/18/2026 01:16:00 PMEvil 404 /wp-includes/css/buttons.css
7431918.97.26.80Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3009.61 Safari/537.324/18/2026 01:08:51 PMTried to access http ip directly.
74318165.154.129.220curl/7.29.04/18/2026 12:29:29 PMTried to access http ip directly.
74317168.144.108.157Mozilla/5.04/18/2026 12:14:40 PMEvil 404 /wp-login.php
74316194.187.179.65Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.04/18/2026 11:45:55 AMTried to access http ip directly.
7431585.9.219.124Go-http-client/1.14/18/2026 09:53:37 AMTried to access http ip directly.
7431420.163.60.170Mozilla/5.0 zgrab/0.x4/18/2026 08:30:32 AMUser Agent Mozilla/5.0 zgrab/0.x
7431337.10.113.214Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/18/2026 08:20:47 AMTried to access http ip directly.
74312208.115.230.231Mozilla/6.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.7.43.25 Safari/537.364/18/2026 08:17:26 AMEvil 404 /wp-login.php
74311152.32.150.117curl/7.29.04/18/2026 07:37:03 AMTried to access http ip directly.
74310138.2.102.66libredtail-http4/18/2026 07:32:12 AMTried to access http ip directly.
74309112.78.191.254Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.364/18/2026 06:25:45 AMTried to access http ip directly.
7430866.132.186.198Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/18/2026 05:46:22 AMTried to access http ip directly.
74307118.193.64.235curl/7.29.04/18/2026 05:23:40 AMTried to access http ip directly.
74306152.32.141.9curl/7.29.04/18/2026 04:04:58 AMTried to access http ip directly.
74305118.193.57.121curl/7.29.04/18/2026 03:21:06 AMTried to access http ip directly.
7430445.156.129.85Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364/18/2026 02:51:55 AMTried to access http ip directly.
7430345.148.10.67Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.364/17/2026 11:30:04 PMTried to access http ip directly.
74302176.65.148.196Shodan-Pull/1.04/17/2026 10:07:47 PMTried to access http ip directly.
74301143.92.53.33libredtail-http4/17/2026 06:21:01 PMTried to access http ip directly.
74300212.237.121.194Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.364/17/2026 05:09:30 PMEvil 404 /wp-content/plugins/backup-backup/includes/backup-
74299162.216.149.52Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/17/2026 04:55:25 PMTried to access http ip directly.
74298172.233.24.189Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);4/17/2026 04:45:30 PMEvil 404 .env (AWS vulnerability)
74297152.32.206.87curl/7.29.04/17/2026 03:58:21 PMTried to access http ip directly.
7429643.228.157.67Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.364/17/2026 03:01:48 PMEvil 404 .env (AWS vulnerability)
7429520.163.74.93Mozilla/5.0 zgrab/0.x4/17/2026 01:45:55 PMTried to access http ip directly.
7429452.91.1.143Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/17/2026 12:01:28 PMTried to access http ip directly.
7429393.189.222.80Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.364/17/2026 10:54:20 AMTried to access http ip directly.
74292176.65.139.254Linux Gnu (cow)4/17/2026 09:33:13 AMTried to access http ip directly.
74291183.96.173.196Go-http-client/1.14/17/2026 08:54:51 AMTried to access http ip directly.
74290118.194.251.145curl/7.29.04/17/2026 08:31:31 AMTried to access http ip directly.
7428989.117.146.239Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/17/2026 07:16:00 AMEvil 404 .env (AWS vulnerability)
7428889.117.148.9Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/17/2026 07:16:00 AMEvil 404 .env (AWS vulnerability)
7428788.151.32.168Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.04/17/2026 07:15:30 AMEvil 404 .env (AWS vulnerability)
7428666.132.172.45Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/17/2026 04:59:18 AMTried to access http ip directly.
7428564.23.159.132libredtail-http4/17/2026 04:06:27 AMTried to access http ip directly.
74284195.154.37.24Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.364/17/2026 03:49:33 AMTried to access http ip directly.
74283177.66.247.44Go-http-client/1.14/17/2026 03:08:49 AMTried to access http ip directly.
74282147.185.133.42Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/17/2026 02:26:30 AMTried to access http ip directly.
74281107.150.109.174Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.364/17/2026 02:13:45 AMTried to access http ip directly.
7428020.168.122.6Mozilla/5.0 zgrab/0.x4/17/2026 01:27:59 AMUser Agent Mozilla/5.0 zgrab/0.x
74279152.32.135.81Mozilla/5.0 (Macintosh; Intel Mac OS X 9_1_1) AppleWebKit/542.47 (KHTML, like Gecko) Chrome/92.0.2016 Safari/537.364/17/2026 01:21:33 AMTried to access http ip directly.
7427888.151.34.143Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.04/17/2026 01:14:48 AMEvil 404 .env (AWS vulnerability)
7427746.250.248.115Go-http-client/1.14/17/2026 12:44:15 AMTried to access http ip directly.
74276157.245.103.79Go-http-client/1.14/16/2026 11:09:34 PMTried to access http ip directly.
74275176.65.139.101Shodan-Pull/1.04/16/2026 10:24:02 PMTried to access http ip directly.
7427445.55.158.168Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)4/16/2026 08:35:04 PMTried to access http ip directly.
7427345.196.196.187Go-http-client/1.14/16/2026 08:24:08 PMTried to access http ip directly.
74272159.203.10.9Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.364/16/2026 07:51:12 PMTried to access http ip directly.
74271202.58.242.242Go-http-client/1.14/16/2026 07:29:07 PMTried to access http ip directly.
7427066.132.224.86Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/16/2026 07:03:37 PMTried to access http ip directly.
7426920.78.172.67Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/16/2026 06:01:40 PMEvil 404 /wp-content/plugins/twenty/login.php
7426885.217.149.6Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4/16/2026 04:30:33 PMTried to access http ip directly.
74267118.193.65.212curl/7.29.04/16/2026 04:07:54 PMTried to access http ip directly.
7426620.29.23.166Mozilla/5.0 zgrab/0.x4/16/2026 04:05:13 PMUser Agent Mozilla/5.0 zgrab/0.x
74265101.36.118.148curl/7.29.04/16/2026 03:29:51 PMTried to access http ip directly.
7426435.195.138.45python-requests/2.32.54/16/2026 03:28:11 PMTried to access http ip directly.
7426332.192.252.248Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.364/16/2026 03:11:56 PMEvil 404 .env (AWS vulnerability)
74262193.124.20.243Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/16/2026 03:03:23 PMTried to access http ip directly.
74261103.9.159.151Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.04/16/2026 02:37:19 PMTried to access http ip directly.
7426052.90.1.24Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/16/2026 12:01:09 PMTried to access http ip directly.
7425945.148.10.51Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.364/16/2026 11:40:27 AMEvil 404 .env (AWS vulnerability)
74258149.102.240.182Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.364/16/2026 11:17:29 AMTried to access http ip directly.
74257156.251.25.57Go-http-client/1.14/16/2026 11:08:34 AMTried to access http ip directly.
74256193.176.31.151Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/16/2026 10:09:02 AMTried to access http ip directly.
74255165.154.173.35curl/7.29.04/16/2026 10:05:50 AMTried to access http ip directly.
74254195.178.110.204Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.04/16/2026 09:20:31 AMEvil 404 /cgi-bin/httpd.cgi
7425347.251.22.83curl/7.64.14/16/2026 08:48:39 AMTried to access http ip directly.
74252178.62.24.229Mozilla/5.04/16/2026 08:32:46 AMEvil 404 /wp-login.php
74251167.71.180.252Mozilla/5.04/16/2026 08:05:42 AMEvil 404 /wp-login.php
742508.229.143.57Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.364/16/2026 06:00:16 AMEvil 404 /wp-includes/wlwmanifest.xml
74249165.154.172.244curl/7.29.04/16/2026 05:46:34 AMTried to access http ip directly.
74248118.193.65.175curl/7.29.04/16/2026 04:34:42 AMTried to access http ip directly.
74247107.189.7.189Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364/16/2026 04:27:39 AMEvil 404 /wp-login.php
74246137.184.74.47Mozilla/5.04/16/2026 04:17:28 AMEvil 404 /wp-login.php
7424567.207.94.250Mozilla/5.04/16/2026 04:05:59 AMEvil 404 /wp-login.php
7424488.151.33.247Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/16/2026 03:35:50 AMEvil 404 /config.inc.php
74243101.36.97.131curl/7.29.04/16/2026 12:25:49 AMTried to access http ip directly.
74242172.236.3.108Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.04/16/2026 12:25:01 AMTried to access http ip directly.
74241118.193.39.117Mozilla/5.0 (Windows NT 8_1_2; Win64; x64) AppleWebKit/597.53 (KHTML, like Gecko) Chrome/75.0.2043 Safari/537.364/16/2026 12:19:42 AMTried to access http ip directly.
7424020.89.234.204Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/15/2026 11:39:20 PMEvil 404 /wp-includes/Requests/about.php
74239157.245.199.184Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.364/15/2026 11:15:43 PMEvil 404 /wp-login.php
7423888.151.34.138Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/15/2026 11:14:06 PMEvil 404 .env (AWS vulnerability)
7423788.151.34.138Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.04/15/2026 11:14:06 PMEvil 404 .env (AWS vulnerability)
7423620.24.192.90Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/15/2026 11:13:01 PMEvil 404 /wp-includes/Requests/about.php
7423537.10.113.210Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/15/2026 10:40:29 PMTried to access http ip directly.
7423420.219.218.121Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/15/2026 09:40:17 PMEvil 404 /wp-content/plugins/twenty/login.php
74233152.32.157.173curl/7.29.04/15/2026 09:39:56 PMTried to access http ip directly.
742322.26.82.219libredtail-http4/15/2026 08:45:16 PMTried to access http ip directly.
74231118.193.64.15curl/7.29.04/15/2026 08:19:14 PMTried to access http ip directly.
74230195.140.214.23Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/15/2026 08:07:57 PMTried to access http ip directly.
74229104.28.155.20Mozilla/5.04/15/2026 07:33:27 PMEvil 404 /wp-login.php
742284.196.165.107Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/15/2026 07:31:12 PMEvil 404 /wp-includes/Requests/about.php
7422747.245.143.74curl/7.64.14/15/2026 06:45:10 PMTried to access http ip directly.
74226113.228.199.222Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)4/15/2026 06:43:27 PMTried to access http ip directly.
74225165.154.129.201curl/7.29.04/15/2026 06:05:50 PMTried to access http ip directly.
7422466.132.186.205Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/15/2026 06:01:46 PMTried to access http ip directly.
74223148.72.244.169Go-http-client/1.14/15/2026 04:35:28 PMTried to access http ip directly.
74222101.36.108.191Mozilla/5.0 (Windows NT 7_1_2; Win64; x64) AppleWebKit/593.49 (KHTML, like Gecko) Chrome/101.0.2042 Safari/537.364/15/2026 04:22:36 PMTried to access http ip directly.
74221147.93.4.185Go-http-client/1.14/15/2026 03:17:53 PMTried to access http ip directly.
7422047.77.223.125curl/7.64.14/15/2026 02:56:46 PMTried to access http ip directly.
7421935.203.211.219Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/15/2026 02:45:36 PMTried to access http ip directly.
7421841.110.4.106libredtail-http4/15/2026 02:44:42 PMTried to access http ip directly.
74217165.154.41.50curl/7.29.04/15/2026 02:33:18 PMTried to access http ip directly.
7421666.132.172.221Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/15/2026 01:28:20 PMTried to access http ip directly.
74215172.202.118.46Mozilla/5.0 zgrab/0.x4/15/2026 01:08:30 PMUser Agent Mozilla/5.0 zgrab/0.x
7421466.228.53.204Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.364/15/2026 12:27:02 PMTried to access http ip directly.
74213152.32.235.36curl/7.29.04/15/2026 12:16:00 PMTried to access http ip directly.
7421250.19.163.240Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/15/2026 12:04:02 PMTried to access http ip directly.
7421134.61.126.163Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.364/15/2026 10:20:21 AMEvil 404 /wp-includes/wlwmanifest.xml
7421037.10.113.222Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/15/2026 10:08:57 AMTried to access http ip directly.
7420934.77.175.80python-requests/2.32.54/15/2026 07:16:42 AMTried to access http ip directly.
7420813.86.115.189Mozilla/5.0 zgrab/0.x4/15/2026 07:09:04 AMUser Agent Mozilla/5.0 zgrab/0.x
74207144.172.116.102Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/15/2026 06:18:14 AMEvil 404 .env (AWS vulnerability)
7420620.219.1.89Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364/15/2026 04:31:15 AMEvil 404 /wp-content/plugins/twenty/login.php
74205103.180.237.169Go-http-client/1.14/15/2026 04:20:08 AMTried to access http ip directly.
7420466.228.53.78Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.364/15/2026 04:06:35 AMTried to access http ip directly.
74203144.91.64.234Go-http-client/1.14/15/2026 03:05:13 AMTried to access http ip directly.
74202182.138.158.144Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.364/15/2026 01:38:13 AMTried to access http ip directly.
74201147.185.132.52Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/15/2026 12:29:54 AMTried to access http ip directly.
74200185.209.228.250libredtail-http4/14/2026 10:35:44 PMTried to access http ip directly.
74199212.47.78.119Go-http-client/1.14/14/2026 09:31:18 PMEvil 404 /wp-includes/css/buttons.css
74198147.185.133.186Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4/14/2026 08:24:30 PMTried to access http ip directly.
7419746.101.46.29Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.04/14/2026 07:47:45 PMEvil 404 /boaform/admin/formLogin
741962.26.86.54libredtail-http4/14/2026 06:58:40 PMTried to access http ip directly.
7419585.217.149.0Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4/14/2026 04:21:18 PMTried to access http ip directly.
74194195.178.110.103Mozilla/5.0 (compatible; SecurityScanner/1.0)4/14/2026 03:32:23 PMEvil 404 /wp-content/phpinfo.php
74193195.178.110.103Mozilla/5.0 (compatible; SecurityScanner/1.0)4/14/2026 03:32:23 PMEvil 404 /admin/phpinfo.php
74192173.239.214.223Go-http-client/1.14/14/2026 03:14:54 PMEvil 404 /wp-includes/css/buttons.css
74191164.90.225.199Go-http-client/1.14/14/2026 01:53:33 PMEvil 404 /cgi-bin/authLogin.cgi
74190206.189.19.19Mozilla/5.0 (l9scan/2.0.232313e21323e20313e27363; +https://leakix.net)4/14/2026 01:44:10 PMEvil 404 .env (AWS vulnerability)
74189146.190.63.48Mozilla/5.0 (l9scan/2.0.232313e21323e20313e27363; +https://leakix.net)4/14/2026 01:44:09 PMEvil 404 .env (AWS vulnerability)
74188152.32.251.174Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.364/14/2026 01:09:13 PMTried to access http ip directly.
7418720.252.27.216Linux Gnu (cow)4/14/2026 12:08:57 PMTried to access http ip directly.
7418613.222.182.239Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/14/2026 12:01:06 PMTried to access http ip directly.
74185178.128.21.252Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.364/14/2026 11:50:24 AMEvil 404 /wp-includes/ID3/license.txt
7418443.163.95.253Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.14/14/2026 11:16:54 AMTried to access http ip directly.
7418366.132.172.109Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)4/14/2026 10:48:28 AMTried to access http ip directly.
7418220.83.27.50Mozilla/5.0 zgrab/0.x4/14/2026 10:31:20 AMUser Agent Mozilla/5.0 zgrab/0.x
74181192.248.189.92Go-http-client/1.14/14/2026 08:45:12 AMTried to access http ip directly.
7418037.10.113.220Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)4/14/2026 08:43:40 AMTried to access http ip directly.
7417972.56.5.167Go-http-client/1.14/14/2026 08:10:27 AMTried to access http ip directly.
74178165.245.224.73Mozilla/5.04/14/2026 06:58:41 AMEvil 404 /wp-login.php
74177167.71.167.10Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.364/14/2026 06:49:39 AMTried to access http ip directly.
7417645.12.146.29Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.04/14/2026 06:33:52 AMTried to access http ip directly.
7417588.151.33.234Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.04/14/2026 06:24:21 AMEvil 404 .env (AWS vulnerability)
7417488.151.32.201Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.04/14/2026 06:14:15 AMEvil 404 .env (AWS vulnerability)
74173194.195.90.64Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/14/2026 06:01:32 AMEvil 404 .env (AWS vulnerability)
74172185.111.159.226Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/14/2026 05:55:12 AMEvil 404 .env (AWS vulnerability)
74171137.184.27.155Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.364/14/2026 05:17:16 AMTried to access http ip directly.
7417034.9.39.168Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.364/14/2026 03:22:40 AMEvil 404 .env (AWS vulnerability)
7416980.87.206.72curl/8.5.04/14/2026 03:09:51 AMTried to access http ip directly.
7416845.205.1.3Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364/14/2026 01:51:52 AMEvil 404 .env (AWS vulnerability)
74167172.208.25.111Mozilla/5.0 zgrab/0.x4/14/2026 01:21:03 AMTried to access http ip directly.
74166172.236.16.29Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);4/14/2026 01:09:52 AMEvil 404 .env (AWS vulnerability)
74165159.65.238.246Mozilla/5.0 zgrab/0.x4/14/2026 12:03:23 AMTried to access http ip directly.
7416488.151.32.234Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.364/13/2026 10:37:23 PMEvil 404 .env (AWS vulnerability)
7416335.88.178.60Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.364/13/2026 09:58:46 PMEvil 404 /admin/phpinfo.php