🇬🇷
setupgr
2026-06-14 04:11:48
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.41: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.41: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 07:11:42.807556 2026] [security2:error] [pid 921870:tid 921904] [remote 40.77.178.41:28938] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in tavernadimitris.com"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css"] [unique_id "ai4p_iiyK_EXlfCi56fTlwAAVwU"], referer: https://tavernadimitris.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-13 14:03:48
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.41: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.41: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:03:47.325613 2026] [security2:error] [pid 864848:tid 867265] [remote 40.77.178.41:38658] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/cache/min/1/wp-content/plugins/revslider/public/css/sr7.css"] [unique_id "ai1jQ9p_WC-pRDvpMACheAABDB0"], referer: https://sea-sound.com/
show less
Port Scan
🇦🇺
MAGIC
2026-06-12 00:29:08
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇮
inlink.ltd
2026-05-17 18:45:31
(4 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.178.41 was not IP ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.178.41 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇫🇮
as211431.net
2026-04-15 15:39:39
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.49 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
Anytech
2026-04-03 06:52:20
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇩🇪
FeG Deutschland
2025-10-23 00:01:06
(10 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇨🇳
ThreatBook.io
2025-10-22 22:48:13
(10 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-1 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-10-22 11:02:32 /i18n/fr_FR/event.txt
2025-10-22 11:02:32 /i18n/fr_FR/task.txt
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-10-20 03:43:29
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 40.77.178.41 (msnbot-40-77-178-41.search.msn.co ...
show more
(mod_security) mod_security (id:225170) triggered by 40.77.178.41 (msnbot-40-77-178-41.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 23:43:24.826334 2025] [security2:error] [pid 8396:tid 8396] [client 40.77.178.41:29443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rkhindustries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rkhindustries.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aPWv3BVJHWo-c5CWej9f6wAAAAs"], referer: https://www.rkhindustries.com/services/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2025-09-26 23:09:36
(11 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-0 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-09-26 09:02:47 /tomcat.css
show less
Web App Attack
🇨🇳
ThreatBook.io
2025-09-25 22:58:09
(11 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-0 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.41
2025-09-25 17:40:11 /js/su/widget/form/checkbox.js
show less
Web App Attack
🇦🇺
MAGIC
2025-08-23 00:08:03
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
exxos
2025-08-05 12:48:21
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-08-05 12:28:10
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇨🇴
j458rjqwi348fhjq46
2025-07-31 10:51:39
(1 year ago)
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ...
show more
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Timestamp deviates by 1.1 hours, Timestamp deviates by 1.0 hours (+7 more). Activity: 2120 requests to 254 URLs. Period: 2025-07-31 04:26:50 - 2025-07-31 04:26:50 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack