2026-08-24 23:25:41
(3 weeks ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Aug 24, 23:25 UTC. Origin: United States, Moses Lake.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-08-17 03:50:48
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-08-17 03:25:04
(1 month ago)
2026/08/17 05:25:03 [error] 55158#790632: *1707973 limiting requests, excess: 0.917 by zone "crawler ...
show more
2026/08/17 05:25:03 [error] 55158#790632: *1707973 limiting requests, excess: 0.917 by zone "crawler", client: 40.77.177.221, server: ksol.io, request: "GET /js/hoverintent.min.78b4cde584dc1837c61599790e30c43c.js HTTP/2.0", host: "ksol.io"
...
show less
Bad Web Bot
🇫🇮
YF
2026-06-29 03:01:02
(2 months ago)
WordPress content enumeration
Web App Attack
2026-06-23 18:07:59
(2 months ago)
40.77.177.221 - - [23/Jun/2026:18:07:57 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://ta ...
show more
40.77.177.221 - - [23/Jun/2026:18:07:57 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.221 - - [23/Jun/2026:18:07:57 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.221 - - [23/Jun/2026:18:07:57 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-20 06:21:09
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 09:21:05.254055 2026] [security2:error] [pid 202885:tid 596047] [remote 40.77.177.221:64578] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-engine/assets/js/frontend/modules/data-stores.js"] [unique_id "ajYxUUrlp52aw72Tw8eRKwABCxo"], referer: https://ftiaxtomonosou.gr/%ce%b4%cf%89%ce%bc%ce%ac%cf%84%ce%b9%ce%bf/
show less
Port Scan
🇬🇷
setupgr
2026-06-17 10:35:58
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 13:35:54.045504 2026] [security2:error] [pid 2777555:tid 2781028] [remote 40.77.177.221:2787] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-engine/includes/modules/maps-listings/assets/js/public/location-distance.js"] [unique_id "ajJ4iiujf2PT-9Py5KN_hgAAlR8"], referer: https://ftiaxtomonosou.gr/corian
show less
Port Scan
🇬🇷
setupgr
2026-06-15 23:57:18
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:15.496215 2026] [security2:error] [pid 1917071:tid 1917218] [remote 40.77.177.221:28808] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css"] [unique_id "ajCRW3brIXpbmq-1FoWoeQABGAU"], referer: https://asteriassantorini.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-14 20:05:24
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.221: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 23:05:20.125353 2026] [security2:error] [pid 921889:tid 921989] [remote 40.77.177.221:11142] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css"] [unique_id "ai8JgCykT1eM1OfD7bsy9wABUAI"], referer: https://sea-sound.com/
show less
Port Scan
2026-05-21 00:58:32
(3 months ago)
40.77.177.221 - - [21/May/2026:00:58:29 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://t ...
show more
40.77.177.221 - - [21/May/2026:00:58:29 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.221 - - [21/May/2026:00:58:30 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.221 - - [21/May/2026:00:58:30 +0000] "GET /svg/moon-phase-5.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-16 22:46:11
(4 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.177.221 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.177.221 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-04-06 10:38:49
(5 months ago)
(mod_security) mod_security (id:243420) triggered by 40.77.177.221 (msnbot-40-77-177-221.search.msn. ...
show more
(mod_security) mod_security (id:243420) triggered by 40.77.177.221 (msnbot-40-77-177-221.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 06:38:43.775979 2026] [security2:error] [pid 7298:tid 7298] [client 40.77.177.221:2753] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||gpobiotech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gpobiotech.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adONMdX-SGjh60M39XVeZgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Anytech
2026-04-04 08:44:27
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇨🇳
ThreatBook.io
2026-02-25 23:11:22
(6 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.221
2026- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.221
2026-02-25 06:13:12 /wps/themes/html/Portal/styles.css?themeContextInfo=policyPath:theme%2FSingleTopNavMinimal:policyVersion:1:colorPalette:default:browserVendor:unknown:browserName:Default+HTML+Client:browserVersion:unknown:locale:en:themeOid:J_CGAH47L00O2V002N5SQ0US3010:protectedUrl:false&userLocale=en
show less
Web App Attack
🇦🇺
MAGIC
2026-02-18 01:05:21
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot