2026-08-31 02:01:15
(1 week ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Aug 31, 02:01 UTC. Origin: United States, Moses Lake.
show less
Hacking
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-08-27 20:50:17
(2 weeks ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
TheJimmo
2026-07-22 04:35:10
(1 month ago)
40.77.179.196 40.77.179.196 - - [22/Jul/2026:04:35:10 +0000] "GET /index.php?app=core&module=system& ...
show more
40.77.179.196 40.77.179.196 - - [22/Jul/2026:04:35:10 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=a70932f46e13c35a7930966e04bf507f&attachIDs%5B53130%5D=true&attachIDs%5B53131%5D=true&attachIDs%5B53132%5D=true&attachIDs%5B53133%5D=true&attachIDs%5B53134%5D=true&attachIDs%5B53135%5D=true&attachIDs%5B53136%5D=true&attachIDs%5B53137%5D=true&attachIDs%5B53138%5D=true&attachIDs%5B53139%5D=true&attachIDs%5B53140%5D=true&attachIDs%5B53141%5D=true&attachIDs%5B53142%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23505-hot-rod-power-tour-2026/page/2" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36"
40.77.179.196 40.77.179.196 - - [22/Jul/2026:04:35:10 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=a70932f46e13c35a7930966e04bf507f&attachIDs%5B54091%5D=true&attachIDs%5B54092%5D=true&attachIDs%5B54093%5D=
...
show less
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-07-01 15:01:03
(2 months ago)
WordPress directory enumeration
Web App Attack
🇬🇷
setupgr
2026-06-21 00:58:56
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 03:58:55.411034 2026] [security2:error] [pid 2276:tid 2319] [remote 40.77.179.196:5655] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-16516.css"] [unique_id "ajc3T_FOzdhEIc8u07dGdQAACxc"], referer: https://ftiaxtomonosou.gr/%CE%AD%CF%80%CE%B9%CF%80%CE%BB%CE%BF/
show less
Port Scan
🇬🇷
setupgr
2026-06-18 01:56:07
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 04:56:02.994480 2026] [security2:error] [pid 3040547:tid 3074383] [remote 40.77.179.196:23104] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/elementor/assets/lib/animations/styles/slideInDown.min.css"] [unique_id "ajNQMnJQXt_97GWFlLmCwwAAVh4"], referer: https://ftiaxtomonosou.gr/%CE%B5%CF%80%CE%B9%CE%BA%CE%BF%CE%B9%CE%BD%CF%89%CE%BD%CE%AF%CE%B1/
show less
Port Scan
🇬🇷
setupgr
2026-06-15 09:01:55
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 12:01:53.219484 2026] [security2:error] [pid 921870:tid 921902] [remote 40.77.179.196:39686] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-4744.css"] [unique_id "ai-_gSiyK_EXlfCi56fBCAAARAM"], referer: https://ftiaxtomonosou.gr/%CE%BF%CE%B9-%CE%B5%CE%B3%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82-%CE%BC%CE%B1%CF%82/
show less
Port Scan
🇬🇷
setupgr
2026-06-14 04:27:40
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 07:27:35.767460 2026] [security2:error] [pid 921870:tid 921907] [remote 40.77.179.196:46151] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in villa-izabela.com"] [severity "CRITICAL"] [hostname "villa-izabela.com"] [uri "/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css"] [unique_id "ai4ttyiyK_EXlfCi56fU5gAAVAc"], referer: https://villa-izabela.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-13 00:35:21
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 03:35:16.850254 2026] [security2:error] [pid 351324:tid 351437] [remote 40.77.179.196:36482] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in pankoskal.gr"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/wp-includes/js/wp-emoji-release.min.js"] [unique_id "aiylxK6PDvwc_i5kBP5foQAAwQA"], referer: https://pankoskal.gr/product/%CF%83%CE%BA%CE%AC%CE%BB%CE%B1-%CE%B1%CE%BB%CE%BF%CF%85%CE%BC%CE%B9%CE%BD%CE%AF%CE%BF%CF%85-%CE%B5%CF%80%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%BC%CE%B1%CF%84%CE%B9%CE%BA%CE%AE%CF%82-%CF%87%CF%81%CE%AE-2/
show less
Port Scan
🇬🇷
setupgr
2026-06-12 18:03:52
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 21:03:47.480288 2026] [security2:error] [pid 379042:tid 379053] [remote 40.77.179.196:39683] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in grafeioteletonkaragiannis.gr"] [severity "CRITICAL"] [hostname "grafeioteletonkaragiannis.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css"] [unique_id "aixKA26KWXh6Y3bFiqndsQAAgQo"], referer: https://grafeioteletonkaragiannis.gr/
show less
Port Scan
🇬🇷
setupgr
2026-06-11 07:21:06
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.179.196: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 10:21:05.260047 2026] [security2:error] [pid 2066466:tid 2066560] [remote 40.77.179.196:43410] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css"] [unique_id "aiph4cc6cMSutqv1JrfC6wAAlhY"], referer: https://sea-sound.com/
show less
Port Scan
🇺🇸
RLDD
2026-05-26 07:12:52
(3 months ago)
WP probing -nov
Web App Attack
2026-05-16 22:35:54
(3 months ago)
40.77.179.196 - - [16/May/2026:22:35:49 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net ...
show more
40.77.179.196 - - [16/May/2026:22:35:49 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/benchmark/3766/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.179.196 - - [16/May/2026:22:35:51 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.179.196 - - [16/May/2026:22:35:52 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-15 23:13:53
(3 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.179.196 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.179.196 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇷🇺
Mga Admin
2026-05-07 01:10:41
(4 months ago)
40.77.179.196 - - [07/May/2026:08:10:40 +0700] "GET /ukbb_exome_matrix/gp1bb.rdata HTTP/1.1" 404 196 ...
show more
40.77.179.196 - - [07/May/2026:08:10:40 +0700] "GET /ukbb_exome_matrix/gp1bb.rdata HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36"
...
show less
Web App Attack
