Ban Hackers

Back in the day, hackers were unemployed or unemployable programmers or teenagers with nothing to do.
Now days, it's criminal organizations and Programmers (with a capital P) with masters degrees hired by foreign (and not so foreign) governments to hack into every server they can find. They even try to scan every possible IP address for web servers. When they find one, somebody later tries to hack it.
So, I set up a website for them to visit. It says Coming Soon.
Then, it records their IP Address and bans it from the server with iptables. It also adds their IP Address and User Agent string to the database.

Here are the IP addresses I've banned over the last week:
BannedID IP User Agent String Date Hacked Banned Reason
72677138.68.154.106Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.362/7/2026 10:02:04 PMEvil 404 .env (AWS vulnerability)
72676171.12.10.164Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.362/7/2026 09:58:00 PMTried to access http ip directly.
7267537.202.144.184Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.362/7/2026 09:43:39 PMTried to access http ip directly.
72674157.245.103.95Mozilla/5.0 (compatible; IPScanner/1.0)2/7/2026 09:28:03 PMTried to access http ip directly.
72673107.189.29.166Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.362/7/2026 08:58:00 PMEvil 404 /wp-login.php
72672195.184.76.244Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.02/7/2026 08:51:03 PMTried to access http ip directly.
72671185.180.141.57python-httpx/0.28.12/7/2026 07:36:16 PMUser Agent python-httpx/0.28.1
72670185.180.141.60Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.362/7/2026 07:36:16 PMTried to access http ip directly.
72669159.65.111.243Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.362/7/2026 06:52:52 PMTried to access http ip directly.
72668147.185.133.134Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/7/2026 06:51:06 PMTried to access http ip directly.
72667115.159.105.88libredtail-http2/7/2026 05:21:45 PMTried to access http ip directly.
726661.94.6.230libredtail-http2/7/2026 04:52:21 PMTried to access http ip directly.
72665172.215.144.32Mozilla/5.0 zgrab/0.x2/7/2026 04:44:55 PMTried to access http ip directly.
72664209.97.160.184Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.362/7/2026 03:10:08 PMEvil 404 /wp-includes/ID3/license.txt
7266362.133.62.102libredtail-http2/7/2026 03:04:55 PMTried to access http ip directly.
7266218.219.216.206visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/7/2026 11:55:43 AMTried to access http ip directly.
7266113.59.157.137visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/7/2026 11:52:05 AMTried to access http ip directly.
726603.137.194.242visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/7/2026 11:46:19 AMTried to access http ip directly.
7265954.224.230.196Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/7/2026 11:00:46 AMTried to access http ip directly.
72658199.45.155.68Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)2/7/2026 05:51:31 AMTried to access http ip directly.
7265745.156.87.50Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.462/7/2026 05:18:40 AMTried to access http ip directly.
72656167.71.91.232Mozilla/5.02/7/2026 05:13:29 AMTried to access http ip directly.
72655193.22.146.182Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.362/7/2026 04:01:27 AMTried to access http ip directly.
7265489.187.187.74Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.362/7/2026 03:22:54 AMEvil 404 /wp-includes/wlwmanifest.xml
7265320.102.108.84Mozilla/5.0 zgrab/0.x2/7/2026 02:22:45 AMUser Agent Mozilla/5.0 zgrab/0.x
72652185.247.137.41Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)2/7/2026 02:16:39 AMTried to access http ip directly.
72651185.226.196.18Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/7/2026 12:58:20 AMEvil 404 /admin/
72650185.226.196.19Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/7/2026 12:55:54 AMEvil 404 /cgi-bin/authLogin.cgi
72649185.226.196.20Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/7/2026 12:55:53 AMTried to access http ip directly.
72648185.226.196.17Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/7/2026 12:55:32 AMTried to access http ip directly.
7264785.217.149.30Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)2/7/2026 12:11:10 AMTried to access http ip directly.
726463.135.20.78visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/6/2026 10:49:16 PMTried to access http ip directly.
726453.148.178.131visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/6/2026 10:45:59 PMTried to access http ip directly.
7264418.218.81.94visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.362/6/2026 10:44:58 PMTried to access http ip directly.
72643123.207.47.252Go-http-client/1.12/6/2026 10:35:55 PMTried to access http ip directly.
72642147.185.133.239Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/6/2026 09:50:50 PMTried to access http ip directly.
72641118.193.33.130curl/7.29.02/6/2026 09:30:49 PMTried to access http ip directly.
72640182.100.119.4Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.02/6/2026 06:33:48 PMTried to access http ip directly.
72639167.71.118.212Mozilla/5.0 (Linux; Android 12) Chrome/112.02/6/2026 05:45:05 PMEvil 404 /admin/kcfinder/upload.php
72638147.185.132.249Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/6/2026 05:21:46 PMTried to access http ip directly.
72637165.22.58.37Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.362/6/2026 04:37:35 PMEvil 404 /wp-includes/ID3/license.txt
7263679.52.91.13Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.362/6/2026 04:08:14 PMTried to access http ip directly.
72635167.172.136.13Mozilla/5.0 zgrab/0.x2/6/2026 02:23:41 PMTried to access http ip directly.
7263413.217.231.214Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/6/2026 11:01:51 AMTried to access http ip directly.
726331.12.226.163Go-http-client/1.12/6/2026 09:32:04 AMTried to access http ip directly.
7263240.124.185.240Mozilla/5.0 zgrab/0.x2/6/2026 09:06:36 AMUser Agent Mozilla/5.0 zgrab/0.x
7263134.76.200.20python-requests/2.32.52/6/2026 06:51:23 AMTried to access http ip directly.
72630119.40.84.186Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.362/6/2026 06:17:41 AMEvil 404 .env (AWS vulnerability)
72629157.245.95.82Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.02/6/2026 12:55:18 AMTried to access http ip directly.
72628143.198.231.45Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.02/6/2026 12:51:36 AMTried to access http ip directly.
72627147.185.133.204Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/5/2026 10:45:16 PMTried to access http ip directly.
7262645.171.254.161Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.362/5/2026 09:10:18 PMTried to access http ip directly.
72625195.184.76.156Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.02/5/2026 09:00:16 PMTried to access http ip directly.
72624199.45.155.92Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)2/5/2026 08:19:11 PMTried to access http ip directly.
72623106.119.184.3Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.362/5/2026 07:25:30 PMTried to access http ip directly.
72622165.154.227.13libredtail-http2/5/2026 07:17:20 PMTried to access http ip directly.
72621167.71.150.79Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.362/5/2026 06:49:07 PMEvil 404 .env (AWS vulnerability)
7262045.156.128.202Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/5/2026 06:12:15 PMTried to access http ip directly.
7261945.156.128.203Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.362/5/2026 05:50:32 PMTried to access http ip directly.
72618104.152.52.67curl/7.61.12/5/2026 04:18:06 PMTried to access http ip directly.
72617161.35.216.122Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);2/5/2026 03:58:26 PMEvil 404 .env (AWS vulnerability)
72616138.197.139.21Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.362/5/2026 01:03:37 PMTried to access http ip directly.
7261518.207.126.200Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/5/2026 10:59:49 AMTried to access http ip directly.
7261440.124.179.252Mozilla/5.0 zgrab/0.x2/5/2026 10:29:35 AMUser Agent Mozilla/5.0 zgrab/0.x
72613172.239.103.164Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.02/5/2026 08:25:13 AMTried to access http ip directly.
7261254.248.96.35Go-http-client/1.12/5/2026 08:08:45 AMTried to access http ip directly.
7261160.165.238.170Go-http-client/1.12/5/2026 08:06:08 AMTried to access http ip directly.
72610216.180.246.32'Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)'2/5/2026 07:32:20 AMTried to access http ip directly.
72609175.178.116.123Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.362/5/2026 07:26:30 AMEvil 404 .env (AWS vulnerability)
7260877.90.185.215Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.02/5/2026 07:06:53 AMTried to access http ip directly.
72607159.89.6.36Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.362/5/2026 04:53:06 AMTried to access http ip directly.
72606162.216.149.37Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/5/2026 03:39:54 AMTried to access http ip directly.
7260513.86.116.180Mozilla/5.0 zgrab/0.x2/5/2026 01:58:16 AMUser Agent Mozilla/5.0 zgrab/0.x
7260464.23.164.163Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.02/5/2026 01:31:00 AMTried to access http ip directly.
72603194.187.179.95Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.02/5/2026 12:57:45 AMTried to access http ip directly.
72602101.108.51.244Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.152/5/2026 12:43:10 AMTried to access http ip directly.
7260162.201.244.25Mozilla/5.02/5/2026 12:19:16 AMTried to access http ip directly.
72600185.186.25.226python-requests/2.32.42/5/2026 12:08:17 AMUser Agent python-requests/2.32.4
72599176.65.148.201Linux Gnu (cow)2/4/2026 11:53:38 PMTried to access http ip directly.
7259818.189.91.7Go-http-client/1.12/4/2026 06:53:21 PMTried to access http ip directly.
7259723.234.109.47Mozilla/5.0 zgrab/0.x2/4/2026 03:01:40 PMTried to access http ip directly.
72596159.223.42.132Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.362/4/2026 02:50:55 PMEvil 404 /wp-includes/ID3/license.txt
7259591.196.152.191Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.02/4/2026 12:14:31 PMTried to access http ip directly.
7259420.210.129.57Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/4/2026 11:22:08 AMEvil 404 /wp-admin/css/colors/blue/index.php
7259354.227.131.131Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/4/2026 11:00:59 AMTried to access http ip directly.
72592160.30.137.9Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.362/4/2026 10:22:48 AMEvil 404 /wp-login.php
72591213.139.77.117Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML2/4/2026 09:36:20 AMTried to access http ip directly.
7259020.194.17.220Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/4/2026 08:57:48 AMEvil 404 /wp-admin/css/colors/blue/index.php
72589136.0.9.104Mozilla/5.0 (Linux; Android 5.0; SM-G900V Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Mobile Safari/537.362/4/2026 08:13:51 AMEvil 404 .env (AWS vulnerability)
7258820.219.8.139Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/4/2026 07:40:11 AMEvil 404 /cgi-bin/
7258747.245.81.50Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0;2/4/2026 06:11:53 AMTried to access http ip directly.
7258635.233.94.99python-requests/2.32.52/4/2026 05:29:03 AMTried to access http ip directly.
72585120.48.123.57libredtail-http2/4/2026 05:11:51 AMTried to access http ip directly.
72584134.209.92.127Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);2/4/2026 04:32:24 AMEvil 404 .env (AWS vulnerability)
72583125.99.250.202Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.02/4/2026 04:07:34 AMTried to access http ip directly.
72582147.185.132.204Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/4/2026 03:50:38 AMTried to access http ip directly.
7258120.255.75.91Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/4/2026 02:18:04 AMEvil 404 /cgi-bin/
7258020.196.192.167Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/4/2026 01:31:59 AMEvil 404 /wp-content/themes/admin.php
7257931.171.130.151Go-http-client/1.12/4/2026 01:16:39 AMTried to access http ip directly.
7257820.64.105.194Mozilla/5.0 zgrab/0.x2/4/2026 12:55:09 AMUser Agent Mozilla/5.0 zgrab/0.x
7257743.143.7.239Go-http-client/1.12/4/2026 12:48:51 AMTried to access http ip directly.
7257645.156.248.107Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.362/3/2026 10:48:47 PMEvil 404 .env (AWS vulnerability)
72575176.65.139.12Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.462/3/2026 10:01:19 PMTried to access http ip directly.
72574213.209.159.55Go-http-client/1.12/3/2026 06:00:49 PMEvil 404 .env (AWS vulnerability)
72573185.247.137.169Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)2/3/2026 04:58:09 PMTried to access http ip directly.
72572212.90.61.10Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.362/3/2026 04:43:56 PMTried to access http ip directly.
72571104.248.193.254Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.02/3/2026 11:25:24 AMTried to access http ip directly.
725703.90.6.14Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/3/2026 10:57:23 AMTried to access http ip directly.
7256920.163.2.151Mozilla/5.0 zgrab/0.x2/3/2026 10:45:20 AMUser Agent Mozilla/5.0 zgrab/0.x
7256867.205.180.128Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.02/3/2026 09:37:01 AMTried to access http ip directly.
72567152.32.192.230Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.362/3/2026 09:30:56 AMTried to access http ip directly.
72566159.203.123.9Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.362/3/2026 09:03:06 AMTried to access http ip directly.
72565172.174.236.56Mozilla/5.0 zgrab/0.x2/3/2026 07:50:04 AMUser Agent Mozilla/5.0 zgrab/0.x
7256445.135.193.11Go-http-client/1.12/3/2026 07:37:05 AMTried to access http ip directly.
7256320.98.128.111Mozilla/5.0 zgrab/0.x2/3/2026 05:07:37 AMTried to access http ip directly.
72562185.2.104.81Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.362/3/2026 03:45:25 AMTried to access http ip directly.
7256145.148.10.244Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.02/3/2026 12:42:39 AMEvil 404 .env (AWS vulnerability)
7256034.118.63.78Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.12/3/2026 12:06:38 AMTried to access http ip directly.
72559181.113.30.194Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.362/2/2026 09:53:43 PMTried to access http ip directly.
7255864.226.84.104Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)2/2/2026 07:49:17 PMTried to access http ip directly.
72557103.172.78.45masscan/1.3 (https://github.com/robertdavidgraham/masscan)2/2/2026 06:51:25 PMTried to access http ip directly.
7255689.185.81.112libredtail-http2/2/2026 06:40:06 PMTried to access http ip directly.
7255547.250.95.30curl/7.64.12/2/2026 06:33:30 PMTried to access http ip directly.
72554104.248.130.58Go-http-client/1.12/2/2026 05:38:34 PMTried to access http ip directly.
72553209.38.211.43Go-http-client/1.12/2/2026 05:38:34 PMEvil 404 /cgi-bin/authLogin.cgi
72552165.227.158.182Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)2/2/2026 05:38:33 PMTried to access http ip directly.
7255143.204.119.140Go-http-client/1.12/2/2026 05:33:29 PMTried to access http ip directly.
725503.145.168.139Go-http-client/1.12/2/2026 05:14:05 PMTried to access http ip directly.
72549139.59.210.36Go-http-client/1.12/2/2026 04:18:08 PMEvil 404 /solr/admin/info/system
72548164.92.174.223Go-http-client/1.12/2/2026 04:18:08 PMEvil 404 /cgi-bin/authLogin.cgi
72547159.223.38.93Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);2/2/2026 03:17:42 PMEvil 404 .env (AWS vulnerability)
72546176.65.139.7Go-http-client/1.12/2/2026 03:02:19 PMTried to access http ip directly.
7254543.224.137.203Go-http-client/1.12/2/2026 02:02:26 PMTried to access http ip directly.
72544129.204.4.253Go-http-client/1.12/2/2026 01:21:39 PMTried to access http ip directly.
7254320.75.89.92Mozilla/5.0 (Linux x86_64; X11) Gecko/20022702 Firefox/20.02/2/2026 12:23:03 PMTried to access http ip directly.
7254243.128.81.242libredtail-http2/2/2026 11:45:47 AMTried to access http ip directly.
72541103.155.161.119Go-http-client/1.12/2/2026 11:24:35 AMTried to access http ip directly.
7254054.152.220.72Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/2/2026 10:56:44 AMTried to access http ip directly.
7253940.115.138.186Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/2/2026 09:00:25 AMEvil 404 /cgi-bin/
7253820.118.240.192Mozilla/5.0 zgrab/0.x2/2/2026 08:00:47 AMTried to access http ip directly.
725372.58.56.147Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.362/2/2026 07:12:27 AMTried to access http ip directly.
7253635.238.109.167Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.362/2/2026 07:12:22 AMEvil 404 /wp-includes/wlwmanifest.xml
725353.110.191.144Go-http-client/1.12/2/2026 06:49:11 AMTried to access http ip directly.
7253434.134.185.102Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.362/2/2026 06:45:12 AMEvil 404 /wp-includes/wlwmanifest.xml
7253368.183.188.59Linux Gnu (cow)2/2/2026 06:43:49 AMTried to access http ip directly.
72532170.64.149.23Mozilla/5.02/2/2026 04:45:13 AMTried to access http ip directly.
72531147.185.133.118Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity2/2/2026 04:31:09 AMTried to access http ip directly.
7253094.138.144.38Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.362/2/2026 04:30:57 AMTried to access http ip directly.
72529106.53.123.143Go-http-client/1.12/2/2026 02:59:58 AMTried to access http ip directly.
72528185.102.115.142Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.362/1/2026 11:03:34 PMEvil 404 /wp-login.php
72527104.28.214.117Go-http-client/1.12/1/2026 09:44:38 PMEvil 404 /wp-content/style.php
72526195.40.154.8libredtail-http2/1/2026 07:54:59 PMTried to access http ip directly.
72525170.64.215.143Mozilla/5.02/1/2026 07:31:16 PMTried to access http ip directly.
72524140.245.124.110python-requests/2.32.52/1/2026 06:40:48 PMUser Agent python-requests/2.32.5
725235.63.19.3Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.362/1/2026 06:37:47 PMEvil 404 /wp-login.php
7252220.200.210.155Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/1/2026 06:16:51 PMEvil 404 /wp-content/upgrade/index.php
72521204.76.203.210Mozilla/5.0 zgrab/0.x2/1/2026 05:19:23 PMTried to access http ip directly.
72520104.211.72.80Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/1/2026 05:15:37 PMEvil 404 /wp-admin/css/colors/coffee/
72519164.92.88.230Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.362/1/2026 03:14:34 PMTried to access http ip directly.
72518109.205.211.39Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.152/1/2026 02:41:12 PMEvil 404 /wp-admin/
7251720.64.106.118Mozilla/5.0 zgrab/0.x2/1/2026 01:52:18 PMUser Agent Mozilla/5.0 zgrab/0.x
72516146.19.24.133python-requests/2.31.02/1/2026 12:19:56 PMTried to access http ip directly.
7251544.204.29.60Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.362/1/2026 10:59:43 AMTried to access http ip directly.
7251451.96.134.13Go-http-client/1.12/1/2026 10:25:35 AMTried to access http ip directly.
7251352.231.68.175Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362/1/2026 10:10:53 AMEvil 404 /cgi-bin/
72512101.43.79.101Go-http-client/1.12/1/2026 08:54:10 AMTried to access http ip directly.
72511138.118.241.89Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.362/1/2026 06:23:56 AMTried to access http ip directly.
7251018.205.63.110Go-http-client/1.12/1/2026 06:08:58 AMTried to access http ip directly.
72509199.45.155.109Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)2/1/2026 05:41:05 AMTried to access http ip directly.
72508206.189.187.126Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);2/1/2026 03:53:47 AMEvil 404 .env (AWS vulnerability)
7250762.171.180.237libredtail-http2/1/2026 03:21:58 AMTried to access http ip directly.
72506185.193.89.25Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.02/1/2026 02:46:46 AMEvil 404 .env (AWS vulnerability)
7250520.29.23.198Mozilla/5.0 zgrab/0.x2/1/2026 02:40:31 AMUser Agent Mozilla/5.0 zgrab/0.x
72504185.213.174.141Mozilla/5.02/1/2026 01:11:10 AMTried to access http ip directly.
72503205.185.116.204Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.362/1/2026 12:45:12 AMEvil 404 /wp-login.php
7250243.225.157.162Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.362/1/2026 12:40:40 AMEvil 404 .env (AWS vulnerability)