JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

40.77.177.118

Neutral Activity Benign Crawler

Abuse confidence score ?

0% Low Risk

10 reports

7 reporters · latest 3 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	msnbot-40-77-177-118.search.msn.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

40.77.177.118 has been reported 10 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 40.77.177.118

This IP address has been reported a total of 10 times from 7 distinct sources. 40.77.177.118 was first reported on August 5th 2025, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 12:20:15 (3 months ago)	40.77.177.118 - - [12/Jun/2026:12:20:05 +0000] "GET /sw.js HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows ... show more 40.77.177.118 - - [12/Jun/2026:12:20:05 +0000] "GET /sw.js HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.118 - - [12/Jun/2026:12:20:05 +0000] "GET /workbox-bd8a73ee.js HTTP/2.0" 444 0 "https://ranger.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.118 - - [12/Jun/2026:12:20:12 +0000] "GET /_nuxt/R8Ictd9Y.js HTTP/2.0" 444 0 "https://ranger.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-05-20 16:31:35 (4 months ago)	40.77.177.118 - - [20/May/2026:16:31:32 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net ... show more 40.77.177.118 - - [20/May/2026:16:31:32 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/benchmark/10211" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.118 - - [20/May/2026:16:31:32 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" 40.77.177.118 - - [20/May/2026:16:31:33 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 13:31:27 (4 months ago)	(mod_security) mod_security (id:243420) triggered by 40.77.177.118 (msnbot-40-77-177-118.search.msn. ... show more (mod_security) mod_security (id:243420) triggered by 40.77.177.118 (msnbot-40-77-177-118.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 09:31:20.117804 2026] [security2:error] [pid 29437:tid 29437] [client 40.77.177.118:47107] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|gpobiotech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gpobiotech.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "afC2ppfMmZJ8sB68-vaF6AAAAAw"], referer: https://gpopharma.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 kranem	2026-04-16 03:00:10 (5 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Micro ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: /_nuxt/KranemLogo.CrLguHPi.css Timestamp: 2026-04-16T02:31:39Z User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 Anytech	2026-04-03 02:37:40 (5 months ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇨🇳 ThreatBook.io	2026-03-18 22:25:14 (6 months ago)	ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2026- ... show more ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2026-03-18 21:31:19 /static/js/jumpserver_v=8.js show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-29 22:40:01 (7 months ago)	ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2026- ... show more ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2026-01-29 16:56:24 /bower_components/codemirror/theme/mdn-like.css show less	Web App Attack
🇮🇩 hermawan	2025-10-29 16:08:37 (10 months ago)	[Wed Oct 29 23:05:58.719847 2025] [security2:error] [pid 92617:tid 140638918964928] [client 40.77.17 ... show more [Wed Oct 29 23:05:58.719847 2025] [security2:error] [pid 92617:tid 140638918964928] [client 40.77.177.118:58756] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "96"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /script-v180.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/script-v180.js"] [unique_id "aQI7ZpTUi-jwEyr1flyE_gACRhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92642] [8qTeTs4JOiU] [aQI7ZpTUi-jwEyr1flyE_gACRhg] keep_alive=[1] [2025-10-29 23:05:58.719850] [R:aQI7ZpTUi-jwEyr1flyE_gACRhg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-08-06 22:18:29 (1 year ago)	ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2025- ... show more ThreatBook Intelligence: Whitelist,Info more details on https://threatbook.io/ip/40.77.177.118 2025-08-06 02:24:19 /report show less	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-05 09:15:31 (1 year ago)	Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, ... show more Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, Timestamp deviates by 3.2 hours, Timestamp deviates by 1.6 hours (+8 more). Activity: 9861 requests to 50 URLs. Period: 2025-08-05 03:56:37 - 2025-08-05 03:56:34 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.51

🇺🇸 195.184.76.93

🇩🇪 194.35.188.103

🇨🇳 117.36.152.44

🇺🇸 108.253.27.159

🇮🇳 103.173.18.146

🇭🇰 101.36.117.15

🇧🇬 79.124.56.142

🇺🇦 46.200.159.29

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇰🇷 20.214.191.94

🇷🇴 2.57.122.238

🇹🇼 198.235.24.14

🇳🇱 195.178.110.204

🇪🇨 181.188.237.214

🇯🇴 176.29.28.147

🇧🇼 168.167.228.85

🇺🇸 147.185.132.81

🇱🇹 62.60.130.201