Ban Hackers

Back in the day, hackers were unemployed or unemployable programmers or teenagers with nothing to do.
Now days, it's criminal organizations and Programmers (with a capital P) with masters degrees hired by foreign (and not so foreign) governments to hack into every server they can find. They even try to scan every possible IP address for web servers. When they find one, somebody later tries to hack it.
So, I set up a website for them to visit. It says Coming Soon.
Then, it records their IP Address and bans it from the server with iptables. It also adds their IP Address and User Agent string to the database.

Here are the IP addresses I've banned over the last week:
BannedID IP User Agent String Date Hacked Banned Reason
8055961.142.42.201"Mozilla/5.011/15/2026 06:14:48 AMTried to access http ip directly.
80558154.83.197.61Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.1511/15/2026 05:56:19 AMTried to access http ip directly.
8055745.156.129.76Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/15/2026 05:50:47 AMTried to access http ip directly.
8055645.156.87.96zmap-proxy-probe/1.011/15/2026 04:43:11 AMTried to access http ip directly.
80555104.28.232.96Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.1511/15/2026 04:08:06 AMEvil 404 .env (AWS vulnerability)
80554152.42.163.199Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3611/15/2026 12:54:33 AMEvil 404 /wp-login.php
8055340.80.204.77Mozilla/5.0 zgrab/0.x11/15/2026 12:21:57 AMTried to access http ip directly.
8055266.132.186.173Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/14/2026 10:49:03 PMTried to access http ip directly.
80551170.82.78.116Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.011/14/2026 06:49:20 PMEvil 404 /wp-login.php
8055073.6.34.23Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.011/14/2026 06:49:19 PMEvil 404 /wp-login.php
8054972.220.36.22Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.011/14/2026 06:48:52 PMEvil 404 /wp-login.php
8054899.70.28.90Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3611/14/2026 06:48:51 PMEvil 404 /wp-login.php
80547162.194.82.85Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.1511/14/2026 06:48:48 PMEvil 404 /wp-login.php
80546118.219.239.126Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.1511/14/2026 06:48:26 PMEvil 404 /wp-login.php
8054545.144.212.158Go-http-client/1.111/14/2026 05:58:01 PMEvil 404 .env (AWS vulnerability)
8054420.171.10.167Mozilla/5.0 zgrab/0.x11/14/2026 05:06:54 PMUser Agent Mozilla/5.0 zgrab/0.x
8054364.89.160.118Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3611/14/2026 04:05:03 PMEvil 404 /wp-login.php
8054234.229.164.166Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/14/2026 01:39:11 PMTried to access http ip directly.
80541103.59.161.224Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)11/14/2026 11:19:28 AMEvil 404 /wp-admin/
80540178.128.55.74Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/14/2026 10:03:17 AMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
80539207.175.218.17Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/14/2026 06:54:53 AMEvil 404 .env (AWS vulnerability)
8053834.77.153.177Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/14/2026 06:54:52 AMEvil 404 .env (AWS vulnerability)
80537211.154.19.88Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.111/14/2026 06:12:06 AMTried to access http ip directly.
8053634.96.168.81Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/14/2026 06:01:29 AMEvil 404 /admin/phpinfo.php
8053534.77.75.1python-requests/2.34.211/14/2026 04:23:57 AMTried to access http ip directly.
8053445.139.104.214Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.011/14/2026 03:59:11 AMEvil 404 .env (AWS vulnerability)
8053385.11.167.204Go-http-client/1.111/14/2026 03:15:37 AMEvil 404 .env (AWS vulnerability)
8053240.124.178.214Mozilla/5.0 zgrab/0.x11/14/2026 01:42:06 AMUser Agent Mozilla/5.0 zgrab/0.x
8053169.5.169.130Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/14/2026 01:32:17 AMTried to access http ip directly.
8053069.5.169.139Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/14/2026 01:32:05 AMTried to access http ip directly.
8052986.38.187.225Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/14/2026 01:31:48 AMTried to access http ip directly.
8052868.183.226.1Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/13/2026 11:35:17 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
80527103.235.74.107Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)11/13/2026 09:58:20 PMEvil 404 /wp-admin/
8052635.206.136.135Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/13/2026 09:53:02 PMTried to access http ip directly.
8052587.251.64.131Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3611/13/2026 09:51:47 PMTried to access http ip directly.
8052420.40.220.198Mozilla/5.0 zgrab/0.x11/13/2026 09:50:27 PMTried to access http ip directly.
8052320.80.109.139Mozilla/5.0 zgrab/0.x11/13/2026 07:28:47 PMUser Agent Mozilla/5.0 zgrab/0.x
8052220.127.165.131Mozilla/5.0 zgrab/0.x11/13/2026 06:35:18 PMUser Agent Mozilla/5.0 zgrab/0.x
8052154.193.9.96Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.3611/13/2026 06:25:19 PMTried to access http ip directly.
80520165.22.212.145Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3611/13/2026 05:35:19 PMEvil 404 /wp-login.php
80519102.220.163.241Go-http-client/1.111/13/2026 05:29:58 PMEvil 404 .env (AWS vulnerability)
80518102.220.163.79Mozilla/5.0 (Windows NT 10.0; Win64; x64)11/13/2026 04:07:49 PMTried to access http ip directly.
80517146.190.93.162Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/13/2026 02:53:05 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8051687.251.64.126Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3611/13/2026 02:40:46 PMTried to access http ip directly.
8051554.164.141.129Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/13/2026 01:39:01 PMTried to access http ip directly.
8051440.80.204.15Mozilla/5.0 zgrab/0.x11/13/2026 12:57:11 PMUser Agent Mozilla/5.0 zgrab/0.x
8051387.251.64.132Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3611/13/2026 11:53:47 AMTried to access http ip directly.
80512134.209.28.0CGrab/v8.24.1-dev-throughput11/13/2026 11:17:51 AMTried to access http ip directly.
80511151.245.151.51Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)11/13/2026 10:51:18 AMTried to access http ip directly.
80510109.105.210.25Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/13/2026 10:34:03 AMTried to access http ip directly.
8050934.52.251.89Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/13/2026 07:17:35 AMEvil 404 .env (AWS vulnerability)
8050820.65.169.82Mozilla/5.0 zgrab/0.x11/13/2026 06:27:57 AMUser Agent Mozilla/5.0 zgrab/0.x
80507165.154.37.25Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.1711/13/2026 05:09:32 AMTried to access http ip directly.
8050613.62.143.68ApcosysBot/1.0 (+https://apcosys.net)11/13/2026 04:45:27 AMTried to access http ip directly.
8050535.195.85.59Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/13/2026 04:35:40 AMEvil 404 .env (AWS vulnerability)
8050469.5.169.213Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/13/2026 04:01:06 AMTried to access http ip directly.
8050331.14.254.9Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/13/2026 03:59:57 AMTried to access http ip directly.
80502199.165.159.9Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.011/13/2026 01:52:26 AMTried to access http ip directly.
8050136.92.68.241Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.3611/13/2026 01:04:01 AMTried to access http ip directly.
8050020.98.163.96Mozilla/5.0 zgrab/0.x11/12/2026 11:44:52 PMUser Agent Mozilla/5.0 zgrab/0.x
8049934.76.226.40python-requests/2.34.211/12/2026 10:33:51 PMTried to access http ip directly.
80498159.223.134.193Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.3611/12/2026 10:28:45 PMTried to access http ip directly.
8049776.140.80.132ZorpInvader/1.011/12/2026 10:28:31 PMTried to access http ip directly.
8049635.210.212.218Mozilla/5.0 (compatible)11/12/2026 10:23:30 PMTried to access http ip directly.
8049535.210.226.150Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/12/2026 10:22:51 PMTried to access http ip directly.
80494179.43.178.102Mozilla/5.0 (compatible; wf-scan/1.0)11/12/2026 10:12:05 PMTried to access http ip directly.
8049334.47.8.198Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/12/2026 09:33:33 PMEvil 404 .env (AWS vulnerability)
80492129.221.192.30Go-http-client/1.111/12/2026 09:05:39 PMEvil 404 /wp-includes/core.php
80491134.209.106.179Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/12/2026 06:25:29 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8049040.80.204.56Mozilla/5.0 zgrab/0.x11/12/2026 06:09:13 PMTried to access http ip directly.
8048920.163.12.245Mozilla/5.0 zgrab/0.x11/12/2026 04:45:42 PMUser Agent Mozilla/5.0 zgrab/0.x
8048843.243.73.167Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.111/12/2026 04:19:08 PMTried to access http ip directly.
804873.91.176.192Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/12/2026 01:43:09 PMTried to access http ip directly.
80486143.198.216.234Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/12/2026 12:10:48 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8048545.156.129.182Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/12/2026 10:55:20 AMTried to access http ip directly.
8048420.168.11.172Mozilla/5.0 zgrab/0.x11/12/2026 10:21:46 AMUser Agent Mozilla/5.0 zgrab/0.x
80483167.99.4.24Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3611/12/2026 09:47:53 AMTried to access http ip directly.
80482190.2.145.165Mozilla/5.011/12/2026 09:34:55 AMEvil 404 /admin/config.php
80481192.197.113.253Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.111/12/2026 07:28:25 AMTried to access http ip directly.
8048034.76.33.44Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/12/2026 05:45:38 AMEvil 404 .env (AWS vulnerability)
80479167.172.232.142Mozilla/5.0 (l9scan/2.0.9393e2438313e2638313e26373; +https://leakix.net)11/12/2026 05:14:21 AMEvil 404 .env (AWS vulnerability)
8047834.76.228.132Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/12/2026 04:54:58 AMEvil 404 .env (AWS vulnerability)
80477199.165.159.201Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:142.0) Gecko/20100101 Firefox/142.011/12/2026 04:19:51 AMTried to access http ip directly.
8047697.107.142.153Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3611/12/2026 03:48:00 AMTried to access http ip directly.
8047564.205.72.42Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/12/2026 01:58:02 AMTried to access http ip directly.
80474194.165.16.156Mozilla/5.0 (compatible; wpcensus/1.0; +research; contact: you@example.com)11/12/2026 01:20:47 AMTried to access http ip directly.
8047345.144.52.239Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3611/11/2026 11:25:24 PMTried to access http ip directly.
80472159.65.224.182Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:159.0) Gecko/20100101 Firefox/159.011/11/2026 08:34:54 PMTried to access http ip directly.
8047135.210.49.18Mozilla/5.0 (compatible; nmap-http-info)11/11/2026 08:34:43 PMTried to access http ip directly.
8047035.210.22.147Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/11/2026 08:31:02 PMTried to access http ip directly.
8046940.74.212.23Mozilla/5.0 zgrab/0.x11/11/2026 08:05:02 PMUser Agent Mozilla/5.0 zgrab/0.x
8046866.132.172.105Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/11/2026 07:47:16 PMTried to access http ip directly.
80467195.184.76.105Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.011/11/2026 07:13:33 PMTried to access http ip directly.
80466109.105.210.62python-httpx/0.28.111/11/2026 05:07:53 PMUser Agent python-httpx/0.28.1
80465109.105.210.65Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/11/2026 05:07:53 PMTried to access http ip directly.
80464103.47.145.29Go-http-client/1.111/11/2026 02:48:08 PMTried to access http ip directly.
80463184.72.73.63Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/11/2026 01:46:28 PMTried to access http ip directly.
80462152.89.170.215Mozilla/5.0 (X11; Linux x86_64) AppTool/1.011/11/2026 12:30:55 PMTried to access http ip directly.
8046145.61.187.50Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.3611/11/2026 11:59:35 AMEvil 404 /wp-login.php
8046051.210.150.97Go-http-client/1.111/11/2026 11:54:23 AMTried to access http ip directly.
80459205.237.104.172Mozilla/5.011/11/2026 09:00:06 AMTried to access http ip directly.
8045858.182.58.128libredtail-http11/11/2026 08:22:33 AMTried to access http ip directly.
8045735.232.183.181Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.3611/11/2026 06:20:54 AMEvil 404 /wp-includes/wlwmanifest.xml
8045634.38.88.176Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/11/2026 05:51:23 AMEvil 404 .env (AWS vulnerability)
80455207.175.90.150python-requests/2.34.211/11/2026 05:25:37 AMTried to access http ip directly.
8045434.140.69.197Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/11/2026 04:44:52 AMEvil 404 .env (AWS vulnerability)
80453201.79.124.69Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/11/2026 03:25:34 AMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8045277.239.124.178Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.011/11/2026 01:31:10 AMEvil 404 /boaform/admin/formLogin
8045135.210.229.50Mozilla/5.0 (compatible; nmap-http-info)11/11/2026 01:05:07 AMTried to access http ip directly.
8045035.210.42.150Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/11/2026 01:04:54 AMTried to access http ip directly.
8044967.43.225.160Python/3.12 aiohttp/3.14.311/10/2026 11:56:54 PMUser Agent Python/3.12 aiohttp/3.14.3
8044820.163.38.21Mozilla/5.0 zgrab/0.x11/10/2026 10:46:28 PMUser Agent Mozilla/5.0 zgrab/0.x
80447178.128.17.115Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/10/2026 10:01:10 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8044648.217.82.142Mozilla/5.0 zgrab/0.x11/10/2026 10:00:02 PMTried to access http ip directly.
8044534.97.206.143Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/10/2026 09:33:30 PMEvil 404 /admin/phpinfo.php
80444162.4.191.200Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3611/10/2026 08:59:56 PMEvil 404 /wp-login.php
80443152.32.157.3curl/7.29.011/10/2026 08:28:53 PMTried to access http ip directly.
8044289.21.67.156Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/10/2026 07:14:05 PMTried to access http ip directly.
8044145.156.87.155Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:133.0) Gecko/20100101 Firefox/133.011/10/2026 07:05:14 PMTried to access http ip directly.
8044066.132.195.48Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/10/2026 06:54:04 PMTried to access http ip directly.
8043966.132.159.97Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/10/2026 06:53:35 PMTried to access http ip directly.
8043834.64.141.150Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/10/2026 04:50:06 PMEvil 404 .env (AWS vulnerability)
80437151.245.151.35Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)11/10/2026 04:21:59 PMTried to access http ip directly.
8043634.19.130.54Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/10/2026 03:51:13 PMEvil 404 .env (AWS vulnerability)
8043520.169.82.238Mozilla/5.0 zgrab/0.x11/10/2026 03:16:38 PMUser Agent Mozilla/5.0 zgrab/0.x
804342.57.17.68Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/10/2026 02:11:07 PMTried to access http ip directly.
80433154.16.44.104Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/10/2026 02:11:06 PMTried to access http ip directly.
8043234.64.70.221Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/10/2026 01:46:36 PMEvil 404 .env (AWS vulnerability)
8043152.90.135.8Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/10/2026 01:44:11 PMTried to access http ip directly.
8043074.249.178.46Mozilla/5.0 zgrab/0.x11/10/2026 10:45:25 AMUser Agent Mozilla/5.0 zgrab/0.x
80429161.35.123.149Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3611/10/2026 10:31:00 AMTried to access http ip directly.
80428109.105.209.42Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/10/2026 09:41:41 AMTried to access http ip directly.
80427157.245.157.191Mozilla/5.011/10/2026 09:33:13 AMEvil 404 /cgi-bin/luci/;stok=/login
8042643.106.80.229curl/7.78.011/10/2026 07:37:50 AMTried to access http ip directly.
8042540.119.28.116Mozilla/5.0 zgrab/0.x11/10/2026 07:16:50 AMUser Agent Mozilla/5.0 zgrab/0.x
8042445.74.31.168Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3611/10/2026 06:24:41 AMEvil 404 /wp-login.php
80423187.40.234.239python-requests/2.32.411/10/2026 05:12:06 AMUser Agent python-requests/2.32.4
80422183.204.62.121Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3611/10/2026 04:05:56 AMTried to access http ip directly.
80421209.99.187.43Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.3611/10/2026 03:15:18 AMTried to access http ip directly.
8042045.92.1.25Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0 Safari/537.3611/10/2026 02:57:06 AMEvil 404 .env (AWS vulnerability)
8041920.118.250.192Mozilla/5.0 zgrab/0.x11/10/2026 02:25:20 AMUser Agent Mozilla/5.0 zgrab/0.x
80418199.165.159.41Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.011/10/2026 01:34:43 AMTried to access http ip directly.
8041734.62.86.142Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.3611/10/2026 01:29:40 AMEvil 404 /wp-includes/wlwmanifest.xml
8041695.214.54.159Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.3611/9/2026 11:35:53 PMTried to access http ip directly.
8041535.210.204.44Mozilla/5.0 (compatible)11/9/2026 10:25:39 PMTried to access http ip directly.
8041435.210.106.159Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/9/2026 10:22:30 PMTried to access http ip directly.
80413158.101.136.233Go-http-client/1.111/9/2026 09:32:50 PMEvil 404 /wp-includes/core.php
8041243.163.86.65Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.111/9/2026 09:21:33 PMTried to access http ip directly.
8041120.221.59.29Mozilla/5.0 zgrab/0.x11/9/2026 08:24:56 PMUser Agent Mozilla/5.0 zgrab/0.x
8041066.132.186.168Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/9/2026 05:47:20 PMTried to access http ip directly.
80409134.185.89.72Mozilla/5.0 (X11; Linux x86_64; rv:93.0) Gecko/20100101 Firefox/93.011/9/2026 05:33:59 PMEvil 404 /wp-login.php
8040845.43.57.112Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3611/9/2026 05:33:54 PMTried to access http ip directly.
8040734.50.14.227Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/9/2026 03:51:41 PMEvil 404 .env (AWS vulnerability)
8040677.83.36.159Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.3611/9/2026 03:28:29 PMTried to access http ip directly.
80405141.76.94.39Mozilla/5.0 zgrab/0.x11/9/2026 03:04:19 PMTried to access http ip directly.
80404151.243.11.196Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)11/9/2026 03:00:28 PMTried to access http ip directly.
80403181.215.115.186Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.011/9/2026 02:29:24 PMEvil 404 /boaform/admin/formLogin
8040254.157.21.114Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/9/2026 01:39:18 PMTried to access http ip directly.
80401209.99.187.157Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.2 Safari/537.3611/9/2026 12:51:55 PMTried to access http ip directly.
80400177.104.131.33qmx-internet-hunt/0.1 (+research)11/9/2026 12:28:50 PMTried to access http ip directly.
80399204.76.203.62M11/9/2026 12:20:24 PMTried to access http ip directly.
8039845.131.193.193Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.1511/9/2026 11:25:18 AMEvil 404 /wp-login.php
80397168.144.107.169Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.3611/9/2026 11:18:39 AMEvil 404 /wp-includes/js/json2.js
80396104.28.201.155Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.011/9/2026 10:36:22 AMEvil 404 .env (AWS vulnerability)
8039554.246.75.13Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)11/9/2026 09:57:47 AMTried to access http ip directly.
80394144.172.64.83grok-fp/1.0 (authorized research)11/9/2026 09:57:19 AMTried to access http ip directly.
8039334.21.112.238Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)11/9/2026 09:31:38 AMEvil 404 .env (AWS vulnerability)
80392154.51.61.11Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3611/9/2026 06:50:20 AMTried to access http ip directly.
80391101.36.116.230Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3611/9/2026 06:50:03 AMTried to access http ip directly.
80390193.32.162.148Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3611/9/2026 06:04:16 AMEvil 404 .env (AWS vulnerability)
8038935.206.173.86Mozilla/5.0 (compatible)11/9/2026 03:31:18 AMTried to access http ip directly.
8038835.206.149.166Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/9/2026 03:30:52 AMTried to access http ip directly.
80387140.210.9.69Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.111/9/2026 02:58:59 AMTried to access http ip directly.
8038635.206.150.182Mozilla/5.0 (compatible; nmap-http-info)11/9/2026 02:43:33 AMTried to access http ip directly.
8038535.206.150.95Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/9/2026 02:42:58 AMTried to access http ip directly.
80384104.155.104.139python-requests/2.34.211/9/2026 01:25:59 AMTried to access http ip directly.
80383216.180.246.180Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)11/8/2026 11:05:47 PMTried to access http ip directly.
8038213.140.200.253python-requests/2.31.011/8/2026 09:51:16 PMTried to access http ip directly.
8038135.210.167.103Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3611/8/2026 08:37:39 PMTried to access http ip directly.
8038020.40.220.110Mozilla/5.0 zgrab/0.x11/8/2026 08:22:41 PMTried to access http ip directly.
80379172.171.241.15Mozilla/5.0 zgrab/0.x11/8/2026 07:23:05 PMUser Agent Mozilla/5.0 zgrab/0.x
8037889.21.67.132Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)11/8/2026 07:19:17 PMTried to access http ip directly.
8037766.132.195.211Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11/8/2026 05:12:36 PMTried to access http ip directly.
8037647.84.203.136curl/7.74.011/8/2026 04:15:12 PMTried to access http ip directly.
80375164.90.219.112Go-http-client/1.111/8/2026 04:10:18 PMEvil 404 /cgi-bin/authLogin.cgi
8037434.78.49.147Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/8/2026 03:51:20 PMEvil 404 .env (AWS vulnerability)
80373159.223.78.3Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/8/2026 03:49:32 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
8037234.156.64.247Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3611/8/2026 03:32:57 PMEvil 404 .env (AWS vulnerability)
80371165.22.66.184Go-http-client/1.111/8/2026 02:13:28 PMTried to access http ip directly.
80369178.128.201.30Go-http-client/1.111/8/2026 02:13:27 PMEvil 404 /solr/admin/info/system
80370165.245.242.242Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)11/8/2026 02:13:27 PMTried to access http ip directly.
8036854.234.200.10Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3611/8/2026 01:42:04 PMTried to access http ip directly.
80367167.99.131.245Go-http-client/1.111/8/2026 01:31:45 PMTried to access http ip directly.
80366165.227.141.54Go-http-client/1.111/8/2026 01:31:44 PMEvil 404 /solr/admin/info/system
80365134.209.233.141Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)11/8/2026 01:31:44 PMTried to access http ip directly.
80364188.166.247.152Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/8/2026 01:27:06 PMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php
80363117.27.135.90Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/119.0 Safari/537.3611/8/2026 11:47:43 AMTried to access http ip directly.
80362109.105.209.104Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3611/8/2026 10:46:56 AMTried to access http ip directly.
80361147.185.133.207Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11/8/2026 09:42:51 AMTried to access http ip directly.
80360193.111.117.34Mozilla/5.0 (X11; Linux x86_64) HighPerfScanner/10G11/8/2026 09:10:34 AMTried to access http ip directly.
8035945.194.92.55Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.3611/8/2026 08:21:34 AMTried to access http ip directly.
8035869.55.54.249Mozilla/5.0 zgrab/0.x11/8/2026 07:01:08 AMTried to access http ip directly.
80357159.65.135.176Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.3611/8/2026 06:38:23 AMEvil 404 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php