JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.77.188.195

40.77.188.195 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	msnbot-40-77-188-195.search.msn.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 40.77.188.195 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 40.77.188.195

Whois 40.77.188.195

IP Abuse Reports for 40.77.188.195:

This IP address has been reported a total of 43 times from 13 distinct sources. 40.77.188.195 was first reported on January 9th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Anytech	2026-08-27 21:05:11 (6 days ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
🇫🇷 MatStef132	2025-06-20 23:40:07 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /sw.js UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 show less	Bad Web Bot
🇹🇼 kk_it_man	2025-06-07 20:03:05 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇮🇩 hermawan	2025-06-05 14:21:44 (1 year ago)	[Thu Jun 05 21:17:28.463383 2025] [security2:error] [pid 116038:tid 139881892267712] [client 40.77.1 ... show more [Thu Jun 05 21:17:28.463383 2025] [security2:error] [pid 116038:tid 139881892267712] [client 40.77.188.195:60226] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI_RAW outside range: 32-36,38-126. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2692"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /images/Klimatologi/ found within REQUEST_URI_RAW: /images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2024/04_April_2024/Das-III/Analisis_Dinamika_Atmosfer\\xe2\\x80\\x93Laut_Dan_Prediksi_Curah_Hujan_Update_Dasarian_III_April_2024.jpg request_line = GET /images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2024/04_April_2024/Das-III/Analisis_Dinamika_Atmosfer%E2%80%93Laut_Dan_Prediksi_Curah..."] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-05-07 22:06:09 (1 year ago)	[Thu May 08 05:05:38.252889 2025] [security2:error] [pid 174980:tid 140017579923136] [client 40.77.1 ... show more [Thu May 08 05:05:38.252889 2025] [security2:error] [pid 174980:tid 140017579923136] [client 40.77.188.195:1217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/OneSignalSDKWorker.js"] [unique_id "aBvZMkFywA2wjtXVbA6PmgAA5Sw"], referer https://staklim-malang.info/ [staklim-malang.info] [staklim-malang.info] top=[175025] [rIHi7goXoiM] [aBvZMkFywA2wjtXVbA6PmgAA5Sw] keep_alive=[1] [2025-05-08 05:05:38.252892] [R:aBvZMkFywA2wjtXVbA6PmgAA5Sw] UA:'Mozilla/5.0 (Windows NT ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-05-04 18:23:20 (1 year ago)	[Mon May 05 01:22:50.214077 2025] [security2:error] [pid 428159:tid 139980575856320] [client 40.77.1 ... show more [Mon May 05 01:22:50.214077 2025] [security2:error] [pid 428159:tid 139980575856320] [client 40.77.188.195:1408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "aBewevK0680SlJ_-VmURqQAABgA"], referer https://staklim-jatim.bmkg.go.id/index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555561373-suhu-maksimum-harian-di-jawa-timur-tanggal-22-23-september-tahun-2024 [staklim-jatim.bmkg.go.id] [staklim-jati ... show less	Hacking Web App Attack
🇺🇸 MPL	2025-04-21 23:27:20 (1 year ago)	tcp/443 (9 or more attempts)	Port Scan
🇮🇩 hermawan	2025-04-09 20:08:26 (1 year ago)	[Thu Apr 10 03:07:37.237497 2025] [security2:error] [pid 482466:tid 140601093764800] [client 40.77.1 ... show more [Thu Apr 10 03:07:37.237497 2025] [security2:error] [pid 482466:tid 140601093764800] [client 40.77.188.195:1159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z_bTiRtuYDR-54wCkLcOJwAAZgI"], referer https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/854-prakiraan-harian-cuaca-wisata-di-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-04-02 21:40:22 (1 year ago)	[Thu Apr 03 04:39:52.133618 2025] [security2:error] [pid 183345:tid 140476178998976] [client 40.77.1 ... show more [Thu Apr 03 04:39:52.133618 2025] [security2:error] [pid 183345:tid 140476178998976] [client 40.77.188.195:1217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z-2uqJY3XhbXw2IwgX0-QgAAVAM"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-bulanan/4262-prakiraan-bulanan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/prakiraan-bulanan-sifat-hujan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/555561151-prakiraan-bu ... show less	Hacking Web App Attack
🇹🇼 kk_it_man	2025-03-20 05:23:04 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇺🇸 TPI-Abuse	2025-02-14 03:20:34 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 40.77.188.195 (msnbot-40-77-188-195.search.msn. ... show more (mod_security) mod_security (id:210730) triggered by 40.77.188.195 (msnbot-40-77-188-195.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 22:20:28.380788 2025] [security2:error] [pid 29467:tid 29467] [client 40.77.188.195:20673] [client 40.77.188.195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "Z662fFNj4_aLQOXIoqqIzAAAABY"], referer: http://www.civilwarzone.com/DessertRecipes.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-24 10:40:00 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2024-12-16 23:21:57 (1 year ago)	wordpress-trap	Web App Attack
🇹🇼 kk_it_man	2024-12-16 02:33:05 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇵🇱 sefinek.net	2024-12-15 10:19:05 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROS ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/2 (GET method) Zone: sefinek.net Endpoint: /js/generator/collection.js Timestamp: 2024-12-15T09:20:56Z Ray ID: 8f255c53e80ee818 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.61.247.241

🇺🇸 159.198.74.31

🇧🇷 200.159.177.30

🇩🇪 194.187.176.94

🇺🇦 176.39.13.157

🇧🇬 79.124.62.126

🇺🇸 43.135.144.126

🇨🇳 39.78.136.65

🇸🇪 2a06:bc80:0:1000::16

🇺🇸 2604:a880:400:d1:0:4:e8b9:4001

🇺🇾 186.50.222.135

🇨🇳 180.165.46.214

🇧🇷 177.86.24.206

🇺🇸 172.253.1.27

🇫🇷 172.232.32.15

🇻🇳 125.212.235.194

🇨🇳 120.245.72.44

🇮🇳 103.88.76.27

🇨🇮 102.209.221.239

🇷🇺 95.105.52.153