40.77.177.112

Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /cdn-cgi/zaraz/t UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /cdn-cgi/zaraz/t UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Webpage scraping

2026/08/22 05:22:53 [error] 26706#309822: *3111417 limiting requests, excess: 0.920 by zone "crawler", client: 40.77.177.112, server: ksol.io, request: "GET /fonts/ibm-plex-sans-v23-latin.woff2 HTTP/2.0", host: "ksol.io" ...

(mod_security) mod_security (id:11000010) triggered by 40.77.177.112 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 06:12:16.97 ... show more (mod_security) mod_security (id:11000010) triggered by 40.77.177.112 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 06:12:16.974470 2026] [security2:error] [pid 785068:tid 785078] [remote 40.77.177.112:42887] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css"] [unique_id "ajdWkBGXBK2iHtemAo8H4gABEgk"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%B9%CF%84%CE%B9%CE%AC-2/ show less

(mod_security) mod_security (id:11000010) triggered by 40.77.177.112 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 05:36:15.04 ... show more (mod_security) mod_security (id:11000010) triggered by 40.77.177.112 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 05:36:15.049887 2026] [security2:error] [pid 3029349:tid 3029372] [remote 40.77.177.112:29635] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in cpanagiotou.gr"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/wp-content/uploads/elementor/css/custom-jet-blocks.css"] [unique_id "ajNZn4g6-UBtGfL1mHsn8wAAyhY"], referer: https://cpanagiotou.gr/en/constructions_en/8-storey-building-under-construction-in-galatsi show less

(mod_security) mod_security (id:11000010) triggered by 40.77.177.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:15.752472 2026] [security2:error] [pid 1917021:tid 1917169] [remote 40.77.177.112 ... show more (mod_security) mod_security (id:11000010) triggered by 40.77.177.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:15.752472 2026] [security2:error] [pid 1917021:tid 1917169] [remote 40.77.177.112:14916] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css"] [unique_id "ajCRWw799xbSHUG5HIrrpQAA2BA"], referer: https://asteriassantorini.com/ show less

WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.177.112 was not IP who made PoW GET request earlier

40.77.177.112 - - [16/May/2026:10:52:40 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://ranger.suann.net/benchmark/48c2ea20-92f6-4d88-bb2c-8c0311eaaf25" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146. ... show more 40.77.177.112 - - [16/May/2026:10:52:40 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://ranger.suann.net/benchmark/48c2ea20-92f6-4d88-bb2c-8c0311eaaf25" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.112 - - [16/May/2026:10:52:40 +0000] "GET /workbox-bd8a73ee.js HTTP/2.0" 444 0 "https://ranger.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.112 - - [16/May/2026:10:52:52 +0000] "GET /_nuxt/CP7gguQd.js HTTP/2.0" 444 0 "https://ranger.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" ... show less

Blocked by Conn-Monitor: Automated bot activity

Blocked by Conn-Monitor: Automated bot activity

ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.112 2026-03-11 13:33:37 /static/css/loginstyle.css

ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.112 2026-02-27 06:49:41 /i18n/de_DE/event.txt

ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.112 2026-01-29 13:42:19 /ui/css/ui.css

VM1 Bad user agents ignoring web crawling rules. Draing bandwidth

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24