2026-06-17 06:31:46
(1 month ago)
40.77.178.61 - - [17/Jun/2026:06:31:43 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://ta ...
show more
40.77.178.61 - - [17/Jun/2026:06:31:43 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.61 - - [17/Jun/2026:06:31:43 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.178.61 - - [17/Jun/2026:06:31:43 +0000] "GET /svg/moon-phase-5.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-14 20:05:23
(1 month ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.61: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.61: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 23:05:20.102146 2026] [security2:error] [pid 922089:tid 922093] [remote 40.77.178.61:63616] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/plugins/ultimate-elementor/assets/min-css/uael-frontend.min.css"] [unique_id "ai8JgI2186Wa_UvIHKgyOAABkwM"], referer: https://sea-sound.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-13 13:31:10
(1 month ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.178.61: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.178.61: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 16:31:06.852991 2026] [security2:error] [pid 784517:tid 784659] [remote 40.77.178.61:63619] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-27025.css"] [unique_id "ai1bmk61JOobkOOcZGJI8gAAyxQ"], referer: https://ftiaxtomonosou.gr/%CE%B5%CF%80%CE%B9%CE%BA%CE%BF%CE%B9%CE%BD%CF%89%CE%BD%CE%AF%CE%B1/
show less
Port Scan
🇦🇺
Anytech
2026-04-04 00:10:28
(3 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-02 12:29:10
(3 months ago)
Blocked by Conn-Monitor: Automated bot activity
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-03-01 23:40:26
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-03-01 23:40:26 UTC
Log evidence:
03/01/2026-23:40:08.370207 [**] [1:1000104:1] SECURITY Unauthorized RabbitMQ Port Access [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 40.77.178.61:57600 -> 185.127.18.66:15672
show less
Port Scan
Brute-Force
🇨🇳
ThreatBook.io
2025-12-17 23:08:10
(7 months ago)
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.61
2025-1 ...
show more
ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.178.61
2025-12-17 20:08:54 /i18n/es_ES/vui.txt
2025-12-17 20:08:54 /i18n/es_ES/task.txt
show less
Web App Attack
🇮🇩
hermawan
2025-11-22 15:48:40
(8 months ago)
[Sat Nov 22 22:48:38.940103 2025] [security2:error] [pid 33893:tid 140488088045248] [client 40.77.17 ...
show more
[Sat Nov 22 22:48:38.940103 2025] [security2:error] [pid 33893:tid 140488088045248] [client 40.77.178.61:38534] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "112"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /ga-choise-v6.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/ga-choise-v6.js"] [unique_id "aSHbVlVJZ4iQrT7hl_OvKgAAggA"] [staklim-malang.info] [staklim-malang.info] top=[33894] [M8MV3fDQWfE] [aSHbVlVJZ4iQrT7hl_OvKgAAggA] keep_alive=[1] [2025-11-22 22:48:38.940123] [R:aSHbVlVJZ4iQrT7hl_OvKgAAggA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-malang.info' ACCEPT:'*/*'
...
show less
Hacking
Web App Attack
🇨🇴
j458rjqwi348fhjq46
2025-08-02 05:04:40
(11 months ago)
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ...
show more
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Timestamp deviates by 1.9 hours, Timestamp deviates by 1.1 hours (+14 more). Activity: 2431 requests to 287 URLs. Period: 2025-08-01 22:20:14 - 2025-08-01 22:20:14 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack