JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.77.178.249

20.77.178.249 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.77.178.249

Whois 20.77.178.249

IP Abuse Reports for 20.77.178.249:

This IP address has been reported a total of 33 times from 23 distinct sources. 20.77.178.249 was first reported on August 18th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2025-11-06 07:06:04 (8 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/2006-2011-mercedes-cls-class-w219- ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/2006-2011-mercedes-cls-class-w219-with-sport-pkg-cls55-cls63-depo-replacement-fog-light.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Open Proxy VPN IP
🇮🇩 hermawan	2025-11-02 21:48:08 (8 months ago)	[Mon Nov 03 04:47:22.733070 2025] [security2:error] [pid 1156818:tid 140527595906752] [client 20.77. ... show more [Mon Nov 03 04:47:22.733070 2025] [security2:error] [pid 1156818:tid 140527595906752] [client 20.77.178.249:46693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4334-prakiraan-musim-hujan/prakiraan-puncak-musim-hujan/prediksi-6-bulanan-prediksi-puncak-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562422-prediksi-6-bulanan-puncak-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4334-prakiraan-musim-hujan/prakiraan-puncak-musim-huj ... show less	Hacking Web App Attack
🇺🇸 nodepile	2025-11-01 18:40:22 (8 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/2003-2006-mercedes-e-class-w211-am ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/2003-2006-mercedes-e-class-w211-amg-e55-glass-lens-projector-fog-light-set.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Open Proxy VPN IP
🇩🇪 conseilgouz	2025-11-01 09:35:27 (8 months ago)	coe-88 : Bloc AI bots=>/en/component/joaktree/descendants-_generation-4/3!I940?format=raw&techno ... show more coe-88 : Bloc AI bots=>/en/component/joaktree/descendants-_generation-4/3!I940?format=raw&technology=a(ai.) show less	Hacking
🇳🇱 i-turnradio.nl	2025-10-31 20:10:59 (8 months ago)	2025-10-31 @ 21:10:58 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇦🇺 MAGIC	2025-10-26 02:00:53 (8 months ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 mk-dizajn.hr	2025-10-18 16:01:12 (8 months ago)	$f2bV_matches	Brute-Force Web App Attack
🇩🇪 mwgbr	2025-10-18 13:51:38 (8 months ago)	20.77.178.249 (GB/United Kingdom/-), more than 10 Apache 403 hits	Hacking
🇺🇸 rsa	2025-10-15 14:46:00 (9 months ago)	excessive crawling	DDoS Attack Web App Attack
🇩🇪 conseilgouz	2025-10-14 13:25:34 (9 months ago)	ece-88 : Bloc AI bots=>/le-club/les-cours(ai.)	Hacking
🇮🇩 hermawan	2025-10-13 19:13:25 (9 months ago)	[Tue Oct 14 02:13:24.282253 2025] [security2:error] [pid 1063175:tid 140350749398720] [client 20.77. ... show more [Tue Oct 14 02:13:24.282253 2025] [security2:error] [pid 1063175:tid 140350749398720] [client 20.77.178.249:30372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2025/555561734-analisis-bulanan-distribusi-curah-hujan-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4299-analisis-di ... show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2025-10-11 22:40:15 (9 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 249.178.77.20.rbl.malwa ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 249.178.77.20.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇮🇹 Progetto1	2025-09-29 16:01:02 (9 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 conseilgouz	2025-09-28 04:07:25 (9 months ago)	ece-88 : Bloc AI bots=>/le-club/les-cours(ai.)	Hacking
🇨🇭 backslash	2025-09-18 22:10:20 (9 months ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.14.123.8

🇨🇳 218.9.233.175

🇹🇭 202.29.220.106

🇯🇴 176.29.123.170

🇺🇸 154.6.121.43

🇨🇳 116.147.2.86

🇺🇸 20.65.195.16

🇩🇪 213.209.159.154

🇻🇳 210.245.95.11

🇳🇱 185.223.235.30

🇨🇳 175.170.144.17

🇺🇸 172.202.118.45

🇹🇼 128.14.239.217

🇨🇳 115.216.252.186

🇨🇳 113.242.108.74

🇵🇱 109.205.211.221

🇺🇸 104.194.9.81

🇮🇳 103.54.101.203

🇺🇸 91.230.168.50

🇬🇧 81.105.188.205