Ban Hackers

Back in the day, hackers were unemployed or unemployable programmers or teenagers with nothing to do.
Now days, it's criminal organizations and Programmers (with a capital P) with masters degrees hired by foreign (and not so foreign) governments to hack into every server they can find. They even try to scan every possible IP address for web servers. When they find one, somebody later tries to hack it.
So, I set up a website for them to visit. It says Coming Soon.
Then, it records their IP Address and bans it from the server with iptables. It also adds their IP Address and User Agent string to the database.

Here are the IP addresses I've banned over the last week:
BannedID IP User Agent String Date Hacked Banned Reason
77790136.108.76.35Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.368/17/2026 08:09:56 AMEvil 404 /admin/login
7778920.65.194.84Mozilla/5.0 zgrab/0.x8/17/2026 07:54:36 AMTried to access http ip directly.
77788175.6.54.21Mozilla/5.0 zgrab/0.x8/17/2026 06:28:55 AMTried to access http ip directly.
77787130.131.162.82Mozilla/5.0 zgrab/0.x8/17/2026 05:46:21 AMUser Agent Mozilla/5.0 zgrab/0.x
77786185.177.72.17curl/8.7.18/17/2026 05:39:36 AMUser Agent curl/8.7.1
7778564.89.161.82Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.368/17/2026 05:28:24 AMEvil 404 .env (AWS vulnerability)
77784174.138.25.95Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.368/17/2026 04:47:04 AMEvil 404 /wp-admin/install.php
77783216.226.76.20Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.368/17/2026 02:45:59 AMTried to access http ip directly.
77782185.242.3.98Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.308/17/2026 02:39:54 AMEvil 404 .env (AWS vulnerability)
77781172.182.217.32Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/17/2026 02:24:34 AMEvil 404 /shell.php
77780107.150.102.47Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.368/17/2026 01:07:18 AMTried to access http ip directly.
77779194.88.98.108Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/17/2026 12:35:58 AMTried to access http ip directly.
777785.226.140.10Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/17/2026 12:35:52 AMTried to access http ip directly.
77777194.180.49.37Mozilla/5.0 (compatible; Silovik/2.0)8/16/2026 11:55:15 PMEvil 404 .env (AWS vulnerability)
77776194.180.49.37Mozilla/5.0 (compatible; Silovik/2.0)8/16/2026 11:55:15 PMEvil 404 .env (AWS vulnerability)
7777534.156.13.62Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)8/16/2026 10:04:26 PMEvil 404 .env (AWS vulnerability)
77774207.175.170.105Mozilla/5.0 (compatible)8/16/2026 09:33:47 PMTried to access http ip directly.
7777334.77.125.24Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.368/16/2026 09:32:59 PMTried to access http ip directly.
77772136.118.100.179Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)8/16/2026 08:39:51 PMEvil 404 .env (AWS vulnerability)
77771115.224.68.14python-requests/2.34.28/16/2026 08:27:19 PMTried to access http ip directly.
7777045.148.10.75Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.368/16/2026 06:36:35 PMEvil 404 .env (AWS vulnerability)
77769152.42.192.155Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.368/16/2026 06:07:58 PMEvil 404 /wp-admin/install.php
7776891.92.33.36CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)8/16/2026 05:36:13 PMEvil 404 /wp-login.php
7776734.168.246.216Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)8/16/2026 04:23:01 PMEvil 404 .env (AWS vulnerability)
7776634.168.246.216Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)8/16/2026 04:23:01 PMEvil 404 .env (AWS vulnerability)
7776547.114.87.90Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.368/16/2026 03:40:06 PMEvil 404 /phpMyAdmin/index.php
777643.91.175.250Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.368/16/2026 02:37:44 PMTried to access http ip directly.
77763136.67.128.229Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.368/16/2026 01:52:40 PMEvil 404 /admin/login
7776245.79.192.172Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.368/16/2026 01:49:47 PMEvil 404 .env (AWS vulnerability)
77761193.47.62.168Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.368/16/2026 01:45:04 PMEvil 404 .env (AWS vulnerability)
77760157.230.167.185Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.368/16/2026 01:17:06 PMTried to access http ip directly.
7775945.33.90.191Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.368/16/2026 01:16:47 PMTried to access http ip directly.
7775845.33.70.184Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.368/16/2026 01:16:30 PMTried to access http ip directly.
77757167.99.172.211Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.368/16/2026 01:15:36 PMTried to access http ip directly.
77756129.212.235.26Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.368/16/2026 01:15:31 PMEvil 404 /wp-admin/install.php
77755165.227.94.84Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.368/16/2026 01:15:17 PMTried to access http ip directly.
7775420.65.194.174Mozilla/5.0 zgrab/0.x8/16/2026 11:11:25 AMUser Agent Mozilla/5.0 zgrab/0.x
77753150.241.71.157libredtail-http8/16/2026 11:02:38 AMTried to access http ip directly.
7775234.59.11.203Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.368/16/2026 07:34:40 AMEvil 404 /admin/login
7775134.59.11.203Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)8/16/2026 07:34:40 AMEvil 404 .env (AWS vulnerability)
7775064.23.240.40Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.368/16/2026 05:59:17 AMTried to access http ip directly.
77749194.88.98.100Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/16/2026 05:01:19 AMTried to access http ip directly.
7774869.5.169.120Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/16/2026 05:01:12 AMTried to access http ip directly.
7774769.5.169.133Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/16/2026 05:01:00 AMTried to access http ip directly.
7774647.250.180.183curl/7.74.08/16/2026 03:57:35 AMTried to access http ip directly.
7774585.217.149.42Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)8/16/2026 02:02:09 AMTried to access http ip directly.
777428.234.139.116Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)8/16/2026 01:58:20 AMEvil 404 .env (AWS vulnerability)
777418.234.139.116Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)8/16/2026 01:58:11 AMEvil 404 .env (AWS vulnerability)
777448.234.139.116Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)8/16/2026 01:58:11 AMEvil 404 .env (AWS vulnerability)
777408.234.139.116Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot8/16/2026 01:58:11 AMEvil 404 .env (AWS vulnerability)
777438.234.139.116Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)8/16/2026 01:58:11 AMEvil 404 .env (AWS vulnerability)
77739163.172.231.202Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.08/16/2026 01:08:11 AMTried to access http ip directly.
7773835.187.125.79Mozilla/5.0 (compatible)8/16/2026 12:45:15 AMTried to access http ip directly.
77737207.175.4.155Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.368/16/2026 12:45:03 AMTried to access http ip directly.
77736107.150.97.228Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.08/15/2026 10:54:55 PMTried to access http ip directly.
7773594.154.43.114Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.368/15/2026 08:39:22 PMTried to access http ip directly.
7773487.58.206.108CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)8/15/2026 07:49:56 PMEvil 404 /wp-login.php
7773334.116.201.31Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.18/15/2026 07:39:43 PMTried to access http ip directly.
777321.24.16.184Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.368/15/2026 07:01:54 PMTried to access http ip directly.
77731121.29.85.28Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.368/15/2026 07:00:41 PMTried to access http ip directly.
77730172.216.250.30python-requests/2.33.18/15/2026 06:23:36 PMUser Agent python-requests/2.33.1
77729162.243.37.177python-requests/2.31.08/15/2026 03:35:35 PMUser Agent python-requests/2.31.0
77728184.72.64.42Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.368/15/2026 02:36:22 PMTried to access http ip directly.
7772734.78.27.30python-requests/2.32.58/15/2026 01:50:46 PMTried to access http ip directly.
7772645.3.62.67Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.158/15/2026 01:25:46 PMEvil 404 /wp-login.php
7772391.192.10.243Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.368/15/2026 12:59:14 PMEvil 404 .env (AWS vulnerability)
7772491.192.10.243Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.08/15/2026 12:59:14 PMEvil 404 .env (AWS vulnerability)
7772591.192.10.243Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.08/15/2026 12:59:12 PMEvil 404 .env (AWS vulnerability)
7772291.92.40.175Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.58/15/2026 09:21:32 AMEvil 404 .env (AWS vulnerability)
7772131.56.209.210Go-http-client/1.18/15/2026 09:17:44 AMTried to access http ip directly.
77720195.184.76.223Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08/15/2026 06:44:13 AMTried to access http ip directly.
7771947.250.120.163curl/7.74.08/15/2026 06:26:39 AMTried to access http ip directly.
7771862.60.130.210Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.368/15/2026 04:49:40 AMEvil 404 /images/images/cache.php',%20'/assets/images/image
7771720.1.169.243Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/15/2026 04:16:12 AMEvil 404 /wp-includes/fonts
7771695.155.151.24Mozilla/5.08/15/2026 04:15:54 AMTried to access http ip directly.
7771593.123.109.234l9tcpid/v1.1.08/15/2026 02:07:26 AMTried to access http ip directly.
7771466.132.172.191Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)8/15/2026 01:11:43 AMTried to access http ip directly.
7771335.205.211.196Mozilla/5.0 (compatible; nmap-http-info)8/14/2026 11:33:16 PMTried to access http ip directly.
7771234.76.72.28Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.368/14/2026 11:33:04 PMTried to access http ip directly.
7771143.132.155.214Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safa8/14/2026 09:24:28 PMTried to access http ip directly.
77709107.150.111.70Mozilla/5.0 (Windows NT 10.0; rv:139.0) Gecko/20100101 Firefox/139.08/14/2026 08:52:14 PMTried to access http ip directly.
77710107.150.111.70Mozilla/5.0 (Windows NT 10.0; rv:139.0) Gecko/20100101 Firefox/139.08/14/2026 08:52:08 PMTried to access http ip directly.
7770868.155.154.146Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/14/2026 07:48:02 PMEvil 404 /wp-includes/fonts
77707164.132.240.169Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.368/14/2026 07:41:05 PMEvil 404 /wp-includes/wlwmanifest.xml
77706195.63.31.77Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.368/14/2026 07:26:52 PMEvil 404 /wp-login.php
7770435.239.48.204Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.368/14/2026 06:30:16 PMEvil 404 /admin/login
7770335.239.48.204Mozilla/5.0 (compatible; Google-Agent; +http://www.google.com/bot.html)8/14/2026 06:30:16 PMEvil 404 .env (AWS vulnerability)
7770535.239.48.204Mozilla/5.0 (compatible; Google-Agent; +http://www.google.com/bot.html)8/14/2026 06:30:16 PMEvil 404 .env (AWS vulnerability)
7770252.139.47.57Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/14/2026 05:27:47 PMEvil 404 /wp-includes/fonts
7770162.210.142.172Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)8/14/2026 05:21:49 PMTried to access http ip directly.
77700212.64.199.194Go-http-client/1.18/14/2026 04:45:13 PMEvil 404 .env (AWS vulnerability)
77699100.27.18.199Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.368/14/2026 02:49:55 PMTried to access http ip directly.
7769882.108.212.8Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.158/14/2026 02:49:11 PMEvil 404 /wp-login.php
7769735.187.102.7Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)8/14/2026 02:39:23 PMEvil 404 .env (AWS vulnerability)
7769651.91.121.75Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.368/14/2026 02:13:45 PMEvil 404 /wp-login.php
7769545.156.128.230python-httpx/0.28.18/14/2026 01:35:16 PMUser Agent python-httpx/0.28.1
7769445.156.128.234Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.368/14/2026 01:35:08 PMTried to access http ip directly.
7769382.108.212.7Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.368/14/2026 12:50:42 PMEvil 404 /wp-login.php
7769234.156.156.224python-requests/2.32.58/14/2026 08:44:29 AMTried to access http ip directly.
776918.211.142.197curl/7.74.08/14/2026 08:31:53 AMTried to access http ip directly.
7769045.205.1.243Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)8/14/2026 05:53:19 AMTried to access http ip directly.
7768920.83.32.170Mozilla/5.0 zgrab/0.x8/14/2026 05:10:35 AMUser Agent Mozilla/5.0 zgrab/0.x
7768834.78.114.97python-requests/2.32.58/14/2026 04:17:12 AMTried to access http ip directly.
7768714.225.19.60Mozilla/5.0 (compatible; filter9router/1.0)8/14/2026 03:02:46 AMTried to access http ip directly.
776863.144.231.7visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.368/14/2026 02:22:22 AMTried to access http ip directly.
77685191.96.11.173Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.08/14/2026 12:47:24 AMEvil 404 .env (AWS vulnerability)
7768445.148.10.60Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.08/14/2026 12:31:59 AMEvil 404 /wp-login.php
7768369.5.169.102Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/13/2026 10:44:07 PMTried to access http ip directly.
7768269.5.169.85Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/13/2026 10:43:52 PMTried to access http ip directly.
77681194.50.235.134Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/13/2026 10:43:38 PMTried to access http ip directly.
7768034.140.208.100Mozilla/5.0 (compatible; nmap-http-info)8/13/2026 09:56:30 PMTried to access http ip directly.
77679207.175.225.112Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.368/13/2026 09:56:22 PMTried to access http ip directly.
7767892.118.39.57Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/13/2026 08:56:48 PMEvil 404 .env (AWS vulnerability)
77677129.225.172.187Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.08/13/2026 08:54:55 PMEvil 404 /wp-login.php
7767666.132.224.83Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)8/13/2026 08:37:49 PMTried to access http ip directly.
7767520.115.90.159Mozilla/5.0 zgrab/0.x8/13/2026 07:58:23 PMTried to access http ip directly.
77674104.248.147.34Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.158/13/2026 06:58:30 PMEvil 404 /wp-login.php
7767347.85.200.242Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.368/13/2026 06:17:35 PMEvil 404 .env (AWS vulnerability)
7767245.156.129.73Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.368/13/2026 05:53:37 PMTried to access http ip directly.
77671203.159.90.218Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.368/13/2026 04:24:37 PMEvil 404 /wp-includes/wlwmanifest.xml
7767091.92.40.5Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.08/13/2026 03:43:03 PMEvil 404 /boaform/admin/formLogin
7766934.76.141.16Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)8/13/2026 03:27:16 PMEvil 404 /@fs/home/admin/.aws/credentials?raw??
7766834.62.151.135Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)8/13/2026 02:45:05 PMEvil 404 .env (AWS vulnerability)
77667184.72.121.94Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.368/13/2026 02:41:30 PMTried to access http ip directly.
7766620.15.162.204Mozilla/5.0 zgrab/0.x8/13/2026 12:20:18 PMUser Agent Mozilla/5.0 zgrab/0.x
7766545.88.138.44Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.368/13/2026 10:50:09 AMEvil 404 /wp-login.php
77664130.12.180.126Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.368/13/2026 10:27:59 AMEvil 404 .env (AWS vulnerability)
77663167.99.182.39Mozilla/5.0 (l9scan/2.0.9393e2438313e2638313e26373; +https://leakix.net)8/13/2026 10:27:36 AMEvil 404 .env (AWS vulnerability)
7766235.204.199.246python-requests/2.32.38/13/2026 10:27:18 AMUser Agent python-requests/2.32.3
77661164.92.79.203Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.368/13/2026 10:10:05 AMTried to access http ip directly.
7766047.254.255.111curl/7.74.08/13/2026 10:08:19 AMTried to access http ip directly.
7765981.19.216.76Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)8/13/2026 07:40:41 AMTried to access http ip directly.
77658203.159.90.217Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.368/13/2026 06:20:54 AMEvil 404 /wp-includes/wlwmanifest.xml
77656103.215.74.26Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.368/13/2026 06:19:20 AMEvil 404 /blog/wp-login.php
77657103.215.74.26Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.158/13/2026 06:19:11 AMEvil 404 /wp-login.php
7765595.173.216.16Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/13/2026 05:01:19 AMEvil 404 .env (AWS vulnerability)
77654205.237.105.132Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.08/13/2026 04:19:08 AMTried to access http ip directly.
77653170.64.203.236Mozilla/5.08/13/2026 03:46:03 AMEvil 404 /wp-login.php
7765252.40.40.58Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.368/13/2026 03:21:25 AMTried to access http ip directly.
77651165.154.173.83Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.38/13/2026 01:50:26 AMTried to access http ip directly.
77650169.58.152.74Mozilla/5.0 zgrab/0.x8/13/2026 01:37:52 AMUser Agent Mozilla/5.0 zgrab/0.x
7764945.55.238.234Mozilla/5.08/12/2026 11:18:27 PMEvil 404 /wp-login.php
7764818.134.9.38Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.368/12/2026 09:58:52 PMEvil 404 .env (AWS vulnerability)
77647103.168.66.101Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.368/12/2026 09:48:30 PMEvil 404 /wp-login.php
77646206.189.5.249Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.08/12/2026 09:31:15 PMTried to access http ip directly.
7764534.14.49.15Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.368/12/2026 09:08:44 PMTried to access http ip directly.
7764464.225.75.246Mozilla/5.0 (l9scan/2.0.9393e2438313e2638313e26373; +https://leakix.net)8/12/2026 08:40:45 PMEvil 404 .env (AWS vulnerability)
77643151.243.11.237Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)8/12/2026 07:44:22 PMTried to access http ip directly.
7764245.79.168.140Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368/12/2026 07:44:20 PMTried to access http ip directly.
7764145.194.92.40Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.468/12/2026 05:46:21 PMTried to access http ip directly.
77640193.47.62.167Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.368/12/2026 05:30:03 PMEvil 404 /wp-login.php
7763945.194.70.248curl/7.29.08/12/2026 04:16:24 PMTried to access http ip directly.