2026-09-06 23:10:48
(1 week ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Sep 6, 23:10 UTC. Origin: United States, Moses Lake.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-07 08:22:05
(1 month ago)
[FriAug0710:22:03.0098732026][security2:error][pid905062:tid905117][client40.77.178.250:0]ModSecurit ...
show more
[FriAug0710:22:03.0098732026][security2:error][pid905062:tid905117][client40.77.178.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/wp-content/plugins/content-manager-light/\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"377\"][id\"1101013\"][hostname\"alessandrolucchini.ch\"][uri\"/wp-content/plugins/content-manager-light/include/otw_components/otw_grid_manager_light/css/otw-grid.css\"][unique_id\"anWVq27PgVTVcsEY3KsRRgAAAFA\"]\,referer:https://alessandrolucchini.ch/video
show less
Port Scan
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-06-13 02:48:02
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.250: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.250: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 05:47:53.792631 2026] [security2:error] [pid 568634:tid 568687] [remote 40.77.178.250:38981] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/custom-apple-webkit.min.css"] [unique_id "aizE2WhA1AVliy02kiGUaAABxBU"], referer: https://ftiaxtomonosou.gr/%CF%80%CE%B1%CF%84%CF%8E%CE%BC%CE%B1%CF%84%CE%B1/
show less
Port Scan
🇬🇷
setupgr
2026-06-12 19:55:51
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.250: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.250: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 22:55:50.726372 2026] [security2:error] [pid 379042:tid 379058] [remote 40.77.178.250:38984] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css"] [unique_id "aixkRm6KWXh6Y3bFiqn8YgAAjw8"], referer: https://ftiaxtomonosou.gr/%CE%BA%CE%B1%CF%84%CE%B7%CE%B3%CE%BF%CF%81%CE%B9%CE%B5%CF%82-%CF%80%CF%81%CE%BF%CE%B9%CE%BF%CE%BD%CF%84%CF%89%CE%BD-%CE%B4%CF%89%CE%BC%CE%B1%CF%84%CE%B9%CE%BF%CF%85/%CF%80%CE%AC%CF%84%CF%89%CE%BC%CE%B1/
show less
Port Scan
2026-05-14 19:18:14
(4 months ago)
40.77.178.250 - - [14/May/2026:19:18:12 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://t ...
show more
40.77.178.250 - - [14/May/2026:19:18:12 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.250 - - [14/May/2026:19:18:12 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.250 - - [14/May/2026:19:18:12 +0000] "GET /svg/moon-phase-5.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2026-02-25 23:30:48
(6 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.250
2026- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.250
2026-02-25 03:13:36 /bower_components/jquery-ui/themes/base/jquery-ui.min.css
show less
Web App Attack
🇦🇺
MAGIC
2026-01-16 00:08:50
(8 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-09 01:29:22
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 40.77.178.250 (msnbot-40-77-178-250.search.msn. ...
show more
(mod_security) mod_security (id:225170) triggered by 40.77.178.250 (msnbot-40-77-178-250.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 20:29:19.182794 2026] [security2:error] [pid 27500:tid 27500] [client 40.77.178.250:21069] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||events.execsandtechs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "events.execsandtechs.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aWBZ7xcxK00yhjPlAU_9bQAAAAw"], referer: https://events.execsandtechs.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-12-23 03:01:02
(8 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
RLDD
2025-12-17 10:42:25
(9 months ago)
WP probing -nov
Web App Attack
🇨🇳
ThreatBook.io
2025-11-17 23:42:12
(9 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.250
2025- ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.250
2025-11-17 17:58:18 /styles/vendor.css
show less
Web App Attack
🇩🇪
mygcode.de
2025-11-09 19:09:10
(10 months ago)
Scanning for Exploits
Bad Web Bot
🇮🇹
Progetto1
2025-11-05 18:55:03
(10 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇮🇩
hermawan
2025-10-29 16:07:51
(10 months ago)
[Wed Oct 29 23:05:58.634731 2025] [security2:error] [pid 92776:tid 140638918964928] [client 40.77.17 ...
show more
[Wed Oct 29 23:05:58.634731 2025] [security2:error] [pid 92776:tid 140638918964928] [client 40.77.178.250:33223] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "96"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /TableFilter/total-v114.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/total-v114.js"] [unique_id "aQI7Zqrov2Igg3UebYePtAADkhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92801] [mkzcTg6vOSU] [aQI7Zqrov2Igg3UebYePtAADkhg] keep_alive=[1] [2025-10-29 23:05:58.634737] [R:aQI7Zqrov2Igg3UebYePtAADkhg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'stak
...
show less
Hacking
Web App Attack
🇦🇺
MAGIC
2025-10-07 01:31:33
(11 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot