🇬🇷
setupgr
2026-06-17 19:59:33
(1 day ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.219 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.219 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 22:59:28.892620 2026] [security2:error] [pid 2210294:tid 2935571] [remote 40.77.177.219:5253] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in tavernadimitris.com"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/wp-content/cache/min/1/wp-content/uploads/elementor/google-fonts/css/satisfy.css"] [unique_id "ajL8oLhY-m9nTIYxKGQ-iAABjRs"], referer: https://tavernadimitris.com/
show less
Port Scan
🇦🇺
MAGIC
2026-06-17 02:06:37
(2 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇷
setupgr
2026-06-14 09:54:36
(4 days ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.219: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.219: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 12:54:28.145225 2026] [security2:error] [pid 921871:tid 921953] [remote 40.77.177.219:5184] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/elementor/assets/css/widget-heading.min.css"] [unique_id "ai56VO2clReoPvlJKlj4nAAAxRA"], referer: https://ftiaxtomonosou.gr/%CE%BF%CE%B9-%CE%B5%CE%B3%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82-%CE%BC%CE%B1%CF%82/
show less
Port Scan
2026-05-15 17:01:51
(1 month ago)
40.77.177.219 - - [15/May/2026:17:01:48 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net ...
show more
40.77.177.219 - - [15/May/2026:17:01:48 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/benchmark/8558/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.219 - - [15/May/2026:17:01:48 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.219 - - [15/May/2026:17:01:49 +0000] "GET /sass/tailwind.scss HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
RLDD
2026-05-13 18:59:00
(1 month ago)
WP probing -nov
Web App Attack
🇨🇳
ThreatBook.io
2026-05-09 23:23:41
(1 month ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.219
2026- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.219
2026-05-09 20:15:21 /media/jui/css/chosen_ed17cacaa0440f1cfd653fa1555bba2b.css
show less
Web App Attack
🇦🇺
Anytech
2026-04-06 04:07:40
(2 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-02 12:44:10
(2 months ago)
Blocked by Conn-Monitor: Automated bot activity
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-01-12 00:16:48
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇹
sssrit
2025-12-28 07:04:37
(5 months ago)
40.77.177.219 - - [28/Dec/2025:08:04:35 +0100] "GET /wp-content/cache/wpo-minify/1764852487/assets/w ...
show more
40.77.177.219 - - [28/Dec/2025:08:04:35 +0100] "GET /wp-content/cache/wpo-minify/1764852487/assets/wpo-minify-footer-831f0893.min.js HTTP/2.0" 404 77697 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36"
...
show less
Web App Attack
🇦🇺
MAGIC
2025-11-16 00:02:39
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2025-11-06 20:33:50
(7 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 248
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2025-10-22 19:25:20
(7 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇮🇩
hermawan
2025-09-27 16:19:24
(8 months ago)
[Sat Sep 27 23:18:34.402006 2025] [security2:error] [pid 2644374:tid 139665007429312] [client 40.77. ...
show more
[Sat Sep 27 23:18:34.402006 2025] [security2:error] [pid 2644374:tid 139665007429312] [client 40.77.177.219:47430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.49 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "aNgOWuj-9Ra5oI5SixUDPQADQQA"], referer https://staklim-jatim.bmkg.go.id/index.php/120-akar/peralatan-observasi-klimatologi/gun-bellani-integrator-radiation [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2644375] [AREAwQrYjno] [aNgOWuj-9Ra5oI5SixUDPQADQQA] keep_alive=[
...
show less
Hacking
Web App Attack
🇨🇴
j458rjqwi348fhjq46
2025-08-13 13:37:45
(10 months ago)
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 4.5 hours, ...
show more
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 4.5 hours, ... and more, Timestamp deviates by 2.6 hours (+7 more). Activity: 13618 requests to 50 URLs. Period: 2025-08-13 08:05:07 - 2025-08-13 08:05:07 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Web App Attack