🇨🇦
Anytech
2026-08-27 20:31:38
(2 weeks ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇬🇷
setupgr
2026-06-15 21:10:25
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.71: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.71: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 00:10:22.617388 2026] [security2:error] [pid 1917013:tid 1917093] [remote 40.77.177.71:51909] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-20156.css"] [unique_id "ajBqPkEA9pRZS3vlJ2u5YQAAkBE"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%ce%b4%ce%b5%cf%83%cf%80%ce%bf%cf%84%ce%ac%ce%ba%ce%b9-%ce%b5%cf%85%cf%81%cf%8e%cf%80%ce%b7%cf%82/
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-13 16:07:11
(3 months ago)
(mod_security) mod_security (id:211700) triggered by 40.77.177.71 (msnbot-40-77-177-71.search.msn.co ...
show more
(mod_security) mod_security (id:211700) triggered by 40.77.177.71 (msnbot-40-77-177-71.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:07:07.966856 2026] [security2:error] [pid 30305:tid 30305] [client 40.77.177.71:1028] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[ ()]case ?\\\\(|\\\\) ?like ?\\\\(|\\\\bhaving ?[^\\\\s]+ ?[^\\\\w ]|\\\\bif ?\\\\([\\\\d\\\\w] ?[=<>~])" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "33"] [id "211700"] [rev "8"] [msg "COMODO WAF: Detects conditional SQL injection attempts||15tobefit.com|F|2"] [data "Matched Data: if found within MATCHED_VAR: live-news-12158664-2026-06-13-artificial-intelligence-for-science-report-science-is-having-an-ai-boom-a-world-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "15tobefit.com"] [uri "/"] [unique_id "ai2AK-II0ZafPQbkaf3BxAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-13 14:47:26
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.71: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.71: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:47:24.255228 2026] [security2:error] [pid 864848:tid 864939] [remote 40.77.177.71:51906] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in fashionfragonard.gr"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/shopengine-pro/modules/partial-payment/assets/js/partial-payment-frontend.js"] [unique_id "ai1tfNp_WC-pRDvpMACssAABAAA"], referer: https://fashionfragonard.gr/
show less
Port Scan
2026-05-17 01:44:19
(3 months ago)
40.77.177.71 - - [17/May/2026:01:44:08 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://ta ...
show more
40.77.177.71 - - [17/May/2026:01:44:08 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.71 - - [17/May/2026:01:44:09 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.71 - - [17/May/2026:01:44:17 +0000] "GET /svg/moon-phase-5.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
Anytech
2026-04-04 09:07:20
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇨🇳
ThreatBook.io
2026-03-25 00:34:48
(5 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.71
2026-0 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.71
2026-03-24 17:51:46 /ajax/libs/layer/theme/default/layer.css?v=3.5.0
show less
Web App Attack
🇨🇳
ThreatBook.io
2026-02-15 23:37:05
(7 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.71
2026-0 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.71
2026-02-15 02:54:56 /i18n/zh_TW/network.txt
2026-02-15 06:37:55 /i18n/de_DE/vm.txt
show less
Web App Attack
🇮🇩
hermawan
2025-09-17 16:03:09
(11 months ago)
[Wed Sep 17 23:01:56.953764 2025] [security2:error] [pid 175653:tid 140235529717440] [client 40.77.1 ...
show more
[Wed Sep 17 23:01:56.953764 2025] [security2:error] [pid 175653:tid 140235529717440] [client 40.77.177.71:45251] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /disquss-v5.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/disquss-v5.js"] [unique_id "aMrbdCNja9UOOUNqv7kDEwAD1Q8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[175669] [kbMcW0F8Kj8] [aMrbdCNja9UOOUNqv7kDEwAD1Q8] keep_alive=[1] [2025-09-17 23:01:56.953766] [R:aMrbdCNja9UOOUNqv7kDEwAD1Q8] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' A
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-04 02:46:47
(1 year ago)
[Mon Aug 04 09:36:17.730489 2025] [security2:error] [pid 963940:tid 140161152173760] [client 40.77.1 ...
show more
[Mon Aug 04 09:36:17.730489 2025] [security2:error] [pid 963940:tid 140161152173760] [client 40.77.177.71:1025] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /disquss-v5.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/disquss-v5.js"] [unique_id "aJAcoX6YxbD4dwOH-EzVewAADwI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[963943] [J7rU+ED+sPk] [aJAcoX6YxbD4dwOH-EzVewAADwI] keep_alive=[1] [2025-08-04 09:36:17.730496] [R:aJAcoX6YxbD4dwOH-EzVewAADwI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' AC
...
show less
Hacking
Web App Attack