Ban Hackers

Back in the day, hackers were unemployed or unemployable programmers or teenagers with nothing to do.
Now days, it's criminal organizations and Programmers (with a capital P) with masters degrees hired by foreign (and not so foreign) governments to hack into every server they can find. They even try to scan every possible IP address for web servers. When they find one, somebody later tries to hack it.
So, I set up a website for them to visit. It says Coming Soon.
Then, it records their IP Address and bans it from the server with iptables. It also adds their IP Address and User Agent string to the database.

Here are the IP addresses I've banned over the last week:
BannedID IP User Agent String Date Hacked Banned Reason
73605147.93.179.130libredtail-http3/20/2026 04:08:13 AMTried to access http ip directly.
7360420.221.68.122Mozilla/5.0 zgrab/0.x3/20/2026 03:20:27 AMUser Agent Mozilla/5.0 zgrab/0.x
7360320.63.209.197Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/20/2026 03:16:27 AMEvil 404 /wp-content/themes/haha.php
73602213.152.162.187rs_scan/1.03/20/2026 02:18:21 AMTried to access http ip directly.
7360120.219.138.200Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/20/2026 12:56:50 AMEvil 404 /wp-content/themes/admin.php
7360052.243.57.116Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/20/2026 12:13:25 AMEvil 404 /wp-admin/css/bolt.php
73599164.68.106.39Go-http-client/1.13/19/2026 11:15:58 PMTried to access http ip directly.
7359823.101.4.52Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/19/2026 09:46:45 PMEvil 404 /wp-content/plugins/hello-dolly/
7359720.212.0.99Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/19/2026 06:59:39 PMEvil 404 /wp-content/plugins/hello-dolly/
7359620.169.53.154Mozilla/5.0 zgrab/0.x3/19/2026 06:13:49 PMUser Agent Mozilla/5.0 zgrab/0.x
73595147.185.133.87Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3/19/2026 05:29:51 PMTried to access http ip directly.
7359413.89.124.216Mozilla/5.0 zgrab/0.x3/19/2026 05:23:13 PMUser Agent Mozilla/5.0 zgrab/0.x
7359389.187.187.79Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.363/19/2026 03:49:49 PMEvil 404 /wp-includes/wlwmanifest.xml
7359278.41.63.2Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.363/19/2026 03:22:36 PMEvil 404 /wp-content/txets.php
73591147.224.146.77Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.153/19/2026 03:14:19 PMEvil 404 /wp-login.php
7359015.235.118.77Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.363/19/2026 01:47:46 PMEvil 404 .env (AWS vulnerability)
7358946.151.178.11Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.363/19/2026 01:21:11 PMTried to access http ip directly.
73588163.245.216.35Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.363/19/2026 12:45:50 PMEvil 404 .env (AWS vulnerability)
7358754.242.125.209Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/19/2026 11:59:16 AMTried to access http ip directly.
7358643.228.157.68Go-http-client/1.13/19/2026 11:26:58 AMEvil 404 /wp-content/.git/HEAD
7358520.222.18.47Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/19/2026 09:49:50 AMEvil 404 /wp-content/themes/admin.php
73584103.217.111.233Mozilla/5.03/19/2026 09:17:28 AMEvil 404 /wp-login.php
73583192.109.200.8Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.363/19/2026 06:09:37 AMEvil 404 /wp-login.php
7358234.52.173.82python-requests/2.32.53/19/2026 05:37:55 AMTried to access http ip directly.
73581155.2.192.235Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.363/19/2026 05:26:43 AMEvil 404 .env (AWS vulnerability)
73580165.227.210.249Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.363/19/2026 02:04:43 AMEvil 404 /wp-content/plugins/profile-builder/readme.txt
7357991.213.46.177Go-http-client/1.13/19/2026 01:51:47 AMTried to access http ip directly.
7357835.173.201.178Go-http-client/1.13/19/2026 01:46:02 AMEvil 404 /wp-includes/css/buttons.css
7357764.23.237.155Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.03/18/2026 10:11:50 PMTried to access http ip directly.
73576176.65.139.52Mozilla/5.0 zgrab/0.x3/18/2026 08:56:00 PMTried to access http ip directly.
73575172.237.102.96Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.03/18/2026 08:54:57 PMTried to access http ip directly.
73574146.19.24.191Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.03/18/2026 08:07:58 PMEvil 404 /wp-login.php
7357320.118.232.75Mozilla/5.0 zgrab/0.x3/18/2026 07:45:55 PMTried to access http ip directly.
7357285.105.253.144libredtail-http3/18/2026 05:46:09 PMTried to access http ip directly.
7357191.231.89.43Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.03/18/2026 05:25:25 PMTried to access http ip directly.
7357091.196.152.44Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.03/18/2026 05:25:17 PMTried to access http ip directly.
7356985.217.149.63Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3/18/2026 05:17:20 PMTried to access http ip directly.
73567185.180.141.40Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.03/18/2026 04:12:35 PMTried to access http ip directly.
73568185.180.141.37python-httpx/0.28.13/18/2026 04:12:35 PMUser Agent python-httpx/0.28.1
73566147.224.183.254Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.03/18/2026 01:31:13 PMEvil 404 /wp-login.php
73565167.71.86.48Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.363/18/2026 01:01:19 PMTried to access http ip directly.
735643.92.61.245Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/18/2026 12:02:19 PMTried to access http ip directly.
7356364.181.211.198Mozilla/5.0 (compatible; websiphon/0.2)3/18/2026 10:09:48 AMTried to access http ip directly.
7356213.89.124.208Mozilla/5.0 zgrab/0.x3/18/2026 08:42:57 AMUser Agent Mozilla/5.0 zgrab/0.x
73561104.28.164.44Mozilla/5.03/18/2026 06:40:27 AMEvil 404 /wp-login.php
73560185.177.72.61l9tcpid/v1.1.03/18/2026 06:08:54 AMTried to access http ip directly.
73559103.106.22.9Go-http-client/1.13/18/2026 04:15:54 AMTried to access http ip directly.
73558164.90.141.229Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/538.41 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.363/18/2026 04:07:05 AMTried to access http ip directly.
7355745.82.78.107Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.363/18/2026 04:05:02 AMTried to access http ip directly.
7355620.164.216.39Go-http-client/1.13/18/2026 02:30:35 AMTried to access http ip directly.
7355535.233.42.65python-requests/2.32.53/18/2026 02:11:03 AMTried to access http ip directly.
73554143.44.164.245Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.363/18/2026 01:35:38 AMEvil 404 .env (AWS vulnerability)
73553142.93.167.198libredtail-http3/18/2026 12:22:53 AMTried to access http ip directly.
7355257.151.106.164Mozilla/5.0 zgrab/0.x3/18/2026 12:22:14 AMUser Agent Mozilla/5.0 zgrab/0.x
7355120.196.201.66Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/17/2026 10:41:11 PMEvil 404 /wp-admin/images/
7355045.79.207.252Mozilla/5.0 zgrab/0.x3/17/2026 10:32:14 PMTried to access http ip directly.
73549195.154.59.230Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.363/17/2026 09:32:58 PMTried to access http ip directly.
73548148.135.200.21python-requests/2.32.53/17/2026 09:12:05 PMUser Agent python-requests/2.32.5
7354734.77.177.64python-requests/2.32.53/17/2026 08:57:04 PMTried to access http ip directly.
7354652.35.118.240Go-http-client/1.13/17/2026 08:16:08 PMTried to access http ip directly.
7354520.104.208.128Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/17/2026 08:05:27 PMEvil 404 /wp-content/uploads/index.php
7354435.203.211.84Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3/17/2026 06:48:54 PMTried to access http ip directly.
7354323.180.120.131Mozilla/5.03/17/2026 06:37:52 PMTried to access http ip directly.
7354220.46.120.203Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/17/2026 05:21:42 PMEvil 404 /wp-content/themes/admin.php
73541178.128.214.41Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.463/17/2026 04:24:45 PMTried to access http ip directly.
7354045.194.70.254curl/7.29.03/17/2026 02:54:30 PMTried to access http ip directly.
73539139.59.116.9Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.463/17/2026 02:17:17 PMTried to access http ip directly.
7353820.168.11.130Mozilla/5.0 zgrab/0.x3/17/2026 01:17:38 PMUser Agent Mozilla/5.0 zgrab/0.x
73537185.77.219.109libredtail-http3/17/2026 12:06:06 PMTried to access http ip directly.
7353654.224.113.78Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/17/2026 12:03:41 PMTried to access http ip directly.
73535150.136.253.162Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.03/17/2026 11:53:30 AMEvil 404 /wp-login.php
73534206.189.88.255Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.363/17/2026 10:23:34 AMEvil 404 /wp-login.php
7353320.106.48.199Mozilla/5.0 zgrab/0.x3/17/2026 09:18:45 AMTried to access http ip directly.
7353294.26.106.224Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.03/17/2026 09:08:13 AMEvil 404 /wp-login.php
73531207.166.168.14libredtail-http3/17/2026 09:02:29 AMTried to access http ip directly.
7353024.199.124.239Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.03/17/2026 07:43:39 AMTried to access http ip directly.
7352944.220.188.69Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3107.68 Safari/537.323/16/2026 11:09:42 PMTried to access http ip directly.
73528128.203.200.216Mozilla/5.0 zgrab/0.x3/16/2026 11:03:12 PMUser Agent Mozilla/5.0 zgrab/0.x
7352785.215.47.212Go-http-client/1.13/16/2026 10:55:02 PMTried to access http ip directly.
73526147.182.167.165Mozilla/5.0 zgrab/0.x3/16/2026 10:06:36 PMTried to access http ip directly.
7352562.164.177.15Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.166 Safari/537.363/16/2026 06:24:23 PMEvil 404 /admin/login.php?referrer=/admin/
7352420.78.129.228Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/16/2026 06:13:58 PMEvil 404 /cgi-bin/xmrlpc.php
73523207.211.186.94Mozilla/5.0 (compatible; websiphon/0.2)3/16/2026 04:51:02 PMTried to access http ip directly.
7352285.217.149.25Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3/16/2026 04:08:30 PMTried to access http ip directly.
7352147.77.220.146Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/16/2026 03:36:27 PMTried to access http ip directly.
7352047.254.249.98curl/7.64.13/16/2026 03:35:55 PMTried to access http ip directly.
7351920.204.115.200Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/16/2026 01:43:08 PMEvil 404 /wp-content/themes/haha.php
73518100.26.194.24Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/16/2026 12:03:10 PMTried to access http ip directly.
7351734.78.202.168python-requests/2.32.53/16/2026 12:02:02 PMTried to access http ip directly.
7351620.55.99.64Mozilla/5.0 zgrab/0.x3/16/2026 11:17:20 AMUser Agent Mozilla/5.0 zgrab/0.x
735155.189.136.18libredtail-http3/16/2026 10:55:51 AMTried to access http ip directly.
73514185.247.137.119Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)3/16/2026 09:03:40 AMTried to access http ip directly.
73513161.97.67.38libredtail-http3/16/2026 03:21:17 AMTried to access http ip directly.
7351220.64.105.251Mozilla/5.0 zgrab/0.x3/16/2026 02:59:35 AMTried to access http ip directly.
7351177.83.39.58Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.363/16/2026 02:39:27 AMEvil 404 .env (AWS vulnerability)
73510185.244.104.207Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.363/16/2026 01:36:54 AMTried to access http ip directly.
73509197.254.15.186Go-http-client/1.13/16/2026 12:38:21 AMTried to access http ip directly.
7350851.38.104.193Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.363/16/2026 12:36:00 AMEvil 404 /wp-includes/js/quicktags.js
7350789.248.173.217Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.03/15/2026 09:59:38 PMTried to access http ip directly.
73506144.76.188.149Go-http-client/1.13/15/2026 09:12:16 PMTried to access http ip directly.
73503164.90.214.16Go-http-client/1.13/15/2026 08:33:57 PMEvil 404 /solr/admin/info/system
73502164.92.178.52Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)3/15/2026 08:33:57 PMTried to access http ip directly.
73505161.35.25.112Go-http-client/1.13/15/2026 08:33:57 PMTried to access http ip directly.
73504167.71.46.204Go-http-client/1.13/15/2026 08:33:57 PMEvil 404 /cgi-bin/authLogin.cgi
7350187.121.84.97ALittle Client3/15/2026 07:53:47 PMEvil 404 /admin/server/php/index.php?file=tf2rghf.jpg
73500216.26.255.198Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.13/15/2026 07:23:50 PMEvil 404 /config.inc.php
73499178.104.39.75Go-http-client/1.13/15/2026 06:20:58 PMTried to access http ip directly.
7349835.77.156.228Go-http-client/1.13/15/2026 05:46:58 PMTried to access http ip directly.
73497162.216.150.22Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3/15/2026 03:23:17 PMTried to access http ip directly.
73496170.39.194.162Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.363/15/2026 02:33:13 PMTried to access http ip directly.
7349545.142.154.116Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.363/15/2026 01:45:47 PMTried to access http ip directly.
7349418.210.58.122Go-http-client/1.13/15/2026 01:34:36 PMTried to access http ip directly.
7349384.227.238.107raw-fast/13/15/2026 12:13:29 PMTried to access http ip directly.
7349213.218.94.63Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/15/2026 12:01:52 PMTried to access http ip directly.
7349151.15.142.157Go-http-client/1.13/15/2026 10:12:13 AMTried to access http ip directly.
73490220.167.233.55Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.363/15/2026 09:21:14 AMTried to access http ip directly.
73489149.102.225.177Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.363/15/2026 08:28:29 AMEvil 404 /wp-includes/wlwmanifest.xml
73488168.144.23.162Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.03/15/2026 05:52:48 AMTried to access http ip directly.
7348793.77.177.126libredtail-http3/15/2026 04:47:56 AMTried to access http ip directly.
7348687.121.84.71ALittle Client3/15/2026 02:56:18 AMEvil 404 /admin/plugins/jquery-file-upload/server/php/index
7348552.139.198.173Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/15/2026 02:48:39 AMEvil 404 /cgi-bin/xmrlpc.php
73484194.87.96.189Go-http-client/1.13/15/2026 02:08:57 AMTried to access http ip directly.
7348346.151.182.72Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.03/15/2026 02:03:32 AMEvil 404 .env (AWS vulnerability)
7348234.79.80.71python-requests/2.32.53/15/2026 01:26:12 AMTried to access http ip directly.
7348145.153.34.154Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.363/15/2026 12:46:23 AMEvil 404 .env (AWS vulnerability)
73480103.88.242.21Go-http-client/1.13/14/2026 10:11:47 PMTried to access http ip directly.
7347920.214.141.70Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/14/2026 08:52:02 PMEvil 404 /cgi-bin/xmrlpc.php
7347820.29.57.212Mozilla/5.0 zgrab/0.x3/14/2026 08:31:15 PMTried to access http ip directly.
7347737.27.132.170Go-http-client/1.13/14/2026 06:58:52 PMTried to access http ip directly.
73476205.210.31.199Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3/14/2026 06:10:34 PMTried to access http ip directly.
7347585.137.48.194Go-http-client/1.13/14/2026 12:15:50 PMTried to access http ip directly.
734743.90.41.152Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/14/2026 12:02:00 PMTried to access http ip directly.
73473202.61.192.208Go-http-client/1.13/14/2026 11:35:30 AMTried to access http ip directly.
73472103.39.109.165libredtail-http3/14/2026 10:45:47 AMTried to access http ip directly.
73471103.142.62.35libredtail-http3/14/2026 10:32:32 AMTried to access http ip directly.
7347045.61.187.196Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.363/14/2026 10:03:34 AMEvil 404 /wp-login.php
7346994.250.203.99ivre-masscan/1.3 https://github.com/robertdavidgraham/3/14/2026 10:02:59 AMTried to access http ip directly.
73468160.119.76.44Mozilla/5.03/14/2026 09:35:35 AMTried to access http ip directly.
7346744.246.192.219Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.363/14/2026 08:27:30 AMTried to access http ip directly.
73466167.172.65.58Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.363/14/2026 07:35:08 AMEvil 404 /wp-includes/ID3/license.txt
7346535.233.78.239python-requests/2.32.53/14/2026 04:15:08 AMTried to access http ip directly.
7346482.197.71.28libredtail-http3/14/2026 03:52:16 AMTried to access http ip directly.
7346334.170.93.75Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.363/14/2026 03:27:10 AMEvil 404 /wp-includes/wlwmanifest.xml
73462154.65.110.21Go-http-client/1.13/14/2026 12:38:08 AMTried to access http ip directly.
73461161.97.89.137libredtail-http3/13/2026 11:47:02 PMTried to access http ip directly.
7346020.78.168.104Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/13/2026 10:12:10 PMEvil 404 /wp-content/themes/haha.php
7345935.189.212.100python-requests/2.32.53/13/2026 09:18:11 PMTried to access http ip directly.
73458177.190.67.44xfa13/13/2026 07:47:05 PMEvil 404 /admin/config.php
73457185.234.123.176Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.363/13/2026 05:02:53 PMTried to access http ip directly.
7345654.147.177.214Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.363/13/2026 05:02:30 PMTried to access http ip directly.
7345534.182.19.77Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.363/13/2026 01:56:57 PMEvil 404 /wp-includes/wlwmanifest.xml
7345420.151.4.179Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/13/2026 01:27:19 PMEvil 404 /wp-admin.php
7345320.64.105.68Mozilla/5.0 zgrab/0.x3/13/2026 01:25:27 PMUser Agent Mozilla/5.0 zgrab/0.x
73452104.194.152.134Python-urllib/2.73/13/2026 11:45:13 AMUser Agent Python-urllib/2.7
73451152.42.161.112Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.13/13/2026 11:05:14 AMEvil 404 /wp-login.php
7345020.169.85.177Mozilla/5.0 zgrab/0.x3/13/2026 11:02:35 AMTried to access http ip directly.
734494.204.233.55Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363/13/2026 10:39:38 AMEvil 404 /wp-admin.php
7344813.62.199.253Go-http-client/1.13/13/2026 09:25:07 AMTried to access http ip directly.
73447148.223.224.70Go-http-client/1.13/13/2026 07:00:41 AMTried to access http ip directly.
7344634.212.7.230Go-http-client/1.13/13/2026 06:09:39 AMTried to access http ip directly.
73445146.190.124.39Go-http-client/1.13/13/2026 06:02:23 AMTried to access http ip directly.
73444216.180.246.111Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)3/13/2026 05:12:45 AMTried to access http ip directly.
73443192.159.99.113Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.03/13/2026 04:42:40 AMTried to access http ip directly.
73442185.209.228.254Go-http-client/1.13/13/2026 04:17:47 AMTried to access http ip directly.