🇩🇪
ghostwarriors
2026-08-22 03:50:15
UTC ·
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-08-22 03:22:54
UTC ·
(2 months ago)
2026/08/22 05:22:53 [error] 26706#309822: *3111416 limiting requests, excess: 0.922 by zone "crawler", client: 40.77.177.216, server: ksol.io, request: "GET /js/animations.ee97ff998c847d063f12ea21c29c2241.js HTTP/2.0", host: "ksol.io"
...
Bad Web Bot
🇭🇺
kranem
2026-07-08 21:00:08
UTC ·
(4 months ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /_nuxt/DJ3_Nbbg.js
Timestamp: 2026-07-08T20:56:11Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatib ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /_nuxt/DJ3_Nbbg.js
Timestamp: 2026-07-08T20:56:11Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36
show less
Bad Web Bot
🇬🇷
setupgr
2026-06-17 10:35:53
UTC ·
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 13:35:53.52 ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 13:35:53.520463 2026] [security2:error] [pid 2210175:tid 2210183] [remote 40.77.177.216:2242] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-engine/includes/modules/maps-listings/assets/js/public/user-geolocation.js"] [unique_id "ajJ4iX9oGssBgNwsPFtcxgAAQAY"], referer: https://ftiaxtomonosou.gr/corian
show less
Port Scan
🇬🇷
setupgr
2026-06-15 23:57:18
UTC ·
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:15.550069 2026] [security2:error] [pid 1965768:tid 2103878] [remote 40.77.177.216 ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:15.550069 2026] [security2:error] [pid 1965768:tid 2103878] [remote 40.77.177.216:18178] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/uploads/elementor/google-fonts/css/satisfy.css"] [unique_id "ajCRW5hSggell5vQAURpAgABQSE"], referer: https://asteriassantorini.com/
show less
Port Scan
🇫🇮
as211431.net
2026-06-13 15:39:03
UTC ·
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇷
setupgr
2026-06-13 02:48:00
UTC ·
(5 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 05:47:55.770285 2026] [security2:error] [pid 568634:tid 568679] [remote 40.77.177.216:4 ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.216: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 05:47:55.770285 2026] [security2:error] [pid 568634:tid 568679] [remote 40.77.177.216:48899] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-19916.css"] [unique_id "aizE22hA1AVliy02kiGUfQAB0xA"], referer: https://ftiaxtomonosou.gr/%CF%80%CE%B1%CF%84%CF%8E%CE%BC%CE%B1%CF%84%CE%B1/
show less
Port Scan
2026-05-13 15:14:26
UTC ·
(6 months ago)
40.77.177.216 - - [13/May/2026:15:14:22 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show more
40.77.177.216 - - [13/May/2026:15:14:22 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.216 - - [13/May/2026:15:14:23 +0000] "GET /svg/moon-phase-5.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.216 - - [13/May/2026:15:14:25 +0000] "GET /svg/moon-phase-4.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2026-03-05 23:11:33
UTC ·
(8 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.216
2026-03-05 22:50:52 /download
Web App Attack
🇦🇺
MAGIC
2025-09-29 01:09:28
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2025-08-26 00:13:18
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇨🇳
ThreatBook.io
2025-08-22 23:03:16
UTC ·
(1 year ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.216
2025-08-22 11:55:02 /3parts/babelRuntime.js
Web App Attack
🇮🇩
hermawan
2025-08-03 21:58:59
UTC ·
(1 year ago)
[Mon Aug 04 04:58:39.492275 2025] [security2:error] [pid 810793:tid 140161156351680] [client 40.77.177.216:39360] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsec ...
show more
[Mon Aug 04 04:58:39.492275 2025] [security2:error] [pid 810793:tid 140161156351680] [client 40.77.177.216:39360] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /image-loader-worker-v3.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/image-loader-worker-v3.js"] [unique_id "aI_bjw-Tawli1FydVnnChgAASwY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[810800] [ZpTyF/2UUeU] [aI_bjw-Tawli1FydVnnChgAASwY] keep_alive=[1] [2025-08-04 04:58:39.492281] [R:aI_bjw-Tawli1FydVnnChgAASwY] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'st
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-27 20:07:48
UTC ·
(1 year ago)
[Mon Jul 28 03:06:21.614936 2025] [security2:error] [pid 158489:tid 139996309739200] [client 40.77.177.216:35008] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsec ...
show more
[Mon Jul 28 03:06:21.614936 2025] [security2:error] [pid 158489:tid 139996309739200] [client 40.77.177.216:35008] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "100"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /particle-v167.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/particle-v167.js"] [unique_id "aIaGvRZtBG9TvuU_FbzkTQAAkgI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158492] [rr9ztW4WprQ] [aIaGvRZtBG9TvuU_FbzkTQAAkgI] keep_alive=[1] [2025-07-28 03:06:21.614938] [R:aIaGvRZtBG9TvuU_FbzkTQAAkgI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bmkg.
...
show less
Hacking
Web App Attack