🇨🇦
Anytech
2026-08-28 05:32:56
(2 weeks ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
fortypoundhead
2026-06-26 00:56:38
(2 months ago)
Banned IP Address
Hacking
Web App Attack
🇬🇷
setupgr
2026-06-21 15:55:19
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.239 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.239 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 18:55:19.469433 2026] [security2:error] [pid 1109115:tid 1109147] [remote 40.77.178.239:25156] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/elementor/assets/css/widget-video.min.css"] [unique_id "ajgJZ16TtGF8WntuOVLRvwAAUQk"], referer: https://ftiaxtomonosou.gr/%CE%BF%CE%B9%CE%BA%CE%BF%CE%B4%CE%BF%CE%BC%CE%B9%CE%BA%CE%AE-%CE%BE%CF%85%CE%BB%CE%B5%CE%AF%CE%B1/
show less
Port Scan
🇬🇷
setupgr
2026-06-19 09:11:13
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.239 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.239 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 12:11:10.167722 2026] [security2:error] [pid 202885:tid 202903] [remote 40.77.178.239:37602] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-engine/assets/lib/jet-plugins/jet-plugins.js"] [unique_id "ajUHrkrlp52aw72Tw8fBbwABDRE"], referer: https://ftiaxtomonosou.gr/corian/
show less
Port Scan
🇷🇺
Mga Admin
2026-05-31 20:33:16
(3 months ago)
40.77.178.239 - - [01/Jun/2026:03:33:15 +0700] "GET /sumfregat/alb.rdata HTTP/1.1" 404 196 "-" "Mozi ...
show more
40.77.178.239 - - [01/Jun/2026:03:33:15 +0700] "GET /sumfregat/alb.rdata HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-05-15 19:03:12
(4 months ago)
40.77.178.239 - - [15/May/2026:19:03:09 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net ...
show more
40.77.178.239 - - [15/May/2026:19:03:09 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/benchmark/7499/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.239 - - [15/May/2026:19:03:10 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.239 - - [15/May/2026:19:03:10 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
www.nomadomia.com
2026-04-10 09:48:41
(5 months ago)
Unauthorised API scanning
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇦🇺
Anytech
2026-04-07 17:27:52
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-03 20:49:29
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇨🇳
ThreatBook.io
2025-10-22 23:05:26
(10 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.239
2025- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.239
2025-10-22 11:02:32 /i18n/es_ES/task.txt
show less
Web App Attack
🇨🇳
ThreatBook.io
2025-10-19 23:16:16
(10 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.239
2025- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.239
2025-10-19 14:57:34 /ui/static/js/vendor.e3806268a33ac1f95b11.js
show less
Web App Attack
🇮🇩
hermawan
2025-09-23 14:15:08
(11 months ago)
[Tue Sep 23 21:12:54.550888 2025] [security2:error] [pid 313056:tid 139836169107136] [client 40.77.1 ...
show more
[Tue Sep 23 21:12:54.550888 2025] [security2:error] [pid 313056:tid 139836169107136] [client 40.77.178.239:59080] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /TableFilter/total-v114.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/total-v114.js"] [unique_id "aNKq5r3VEU4DYzUg4Xpb8AABSgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[313060] [xmo1iHh8BGA] [aNKq5r3VEU4DYzUg4Xpb8AABSgM] keep_alive=[1] [2025-09-23 21:12:54.550896] [R:aNKq5r3VEU4DYzUg4Xpb8AABSgM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'st
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-09-15 16:45:09
(1 year ago)
[Mon Sep 15 23:44:38.961393 2025] [security2:error] [pid 590772:tid 140636437751488] [client 40.77.1 ...
show more
[Mon Sep 15 23:44:38.961393 2025] [security2:error] [pid 590772:tid 140636437751488] [client 40.77.178.239:62605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.49 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "aMhCdgXII-io1FFAVFybvAAD0AA"], referer https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-all-categories/4279-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakiraan-curah-hujan-dasarian-di-prov
...
show less
Hacking
Web App Attack
🇨🇴
j458rjqwi348fhjq46
2025-08-07 22:44:24
(1 year ago)
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, ...
show more
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, Timestamp deviates by 3.2 hours, Timestamp deviates by 1.6 hours (+7 more). Activity: 24918 requests to 50 URLs. Period: 2025-08-07 17:39:54 - 2025-08-07 17:39:54 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking