AbuseIPDB » 40.77.188.199

40.77.188.199 was found in our database!

This IP was reported 96 times. Confidence of Abuse is 16%: ?

16%

ISP	Microsoft Corporation
Usage Type	Search Engine Spider
Hostname(s)	msnbot-40-77-188-199.search.msn.com
Domain Name	microsoft.com
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 40.77.188.199

Whois 40.77.188.199

IP Abuse Reports for 40.77.188.199:

This IP address has been reported a total of 96 times from 12 distinct sources. 40.77.188.199 was first reported on December 17th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MAGIC	2024-09-02 09:07:46 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-08-21 10:09:58 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2024-08-13 12:32:51 (4 weeks ago)	(mod_security) mod_security (id:243420) triggered by 40.77.188.199 (msnbot-40-77-188-199.search.msn. ... show more(mod_security) mod_security (id:243420) triggered by 40.77.188.199 (msnbot-40-77-188-199.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 13 08:32:46.552732 2024] [security2:error] [pid 17728:tid 17728] [client 40.77.188.199:45632] [client 40.77.188.199] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.hodlmoser.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ZrtSa2iUKJYmDCb26rM3cQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-08-05 14:03:19 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hermawan	2024-08-02 01:04:41 (1 month ago)	[Fri Aug 02 08:04:33.973899 2024] [security2:error] [pid 360991:tid 126570572285504] [client 40.77.1 ... show more[Fri Aug 02 08:04:33.973899 2024] [security2:error] [pid 360991:tid 126570572285504] [client 40.77.188.199:6016] [client 40.77.188.199] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /administrator/ /TableFilter/system-v167.css /index.php /android-icon-192-192.png /offline-service-worker-07-07-2023-v-4-15-0.js /plugins/Morpheus/ /offline-service-worker-01-08-2023-v4-5-1.js /index.php?module /depan/offline/ /OneSignalSDKWorker.js /O ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "58"] [id "441003"] [msg "bot downloader Cache-Control no-cache gak punya cookies dan diluar REQUEST_LINE line"] [data "Matched Data: no-cache found within REQUEST_LINE: GET /matomo.php?ping=1&idsite=3&rec=1&r=201788&h=18&m=4&s=30&url=https%3A%2F%2Fstaklim-malang.info%2Findex.php%2Fprofil%2Fmeteorologi%2Flist-all-categories%2F4217-klimatologi%2Fprakiraan-klimatologi%2Fprakiraan-dasarian%2Fprakiraan-curah-hujan ... show less	Hacking Web App Attack
MAGIC	2024-08-02 00:08:12 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2024-07-30 02:51:50 (1 month ago)	(mod_security) mod_security (id:243420) triggered by 40.77.188.199 (msnbot-40-77-188-199.search.msn. ... show more(mod_security) mod_security (id:243420) triggered by 40.77.188.199 (msnbot-40-77-188-199.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 29 22:51:42.743651 2024] [security2:error] [pid 6159:tid 6159] [client 40.77.188.199:46016] [client 40.77.188.199] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.thingstodonude.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.thingstodonude.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ZqhVPcweJlA0OtvLtghfnwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-07-16 01:07:56 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-07-07 17:04:20 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-06-24 19:07:51 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hermawan	2024-06-18 15:38:10 (2 months ago)	[Tue Jun 18 22:38:07.326154 2024] [security2:error] [pid 1239892:tid 124119624451648] [client 40.77. ... show more[Tue Jun 18 22:38:07.326154 2024] [security2:error] [pid 1239892:tid 124119624451648] [client 40.77.188.199:6592] [client 40.77.188.199] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /administrator/ /index.php /android-icon-192-192.png /plugins/Morpheus/ /offline-service-worker-01-08-2023-v4-5-1.js /index.php?module /depan/offline/ /OneSignalSDKWorker.js /OneSignalSDKUpdaterWorker.js /worker-analytic-helper-29-11-2022.js /matomo-2 ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "58"] [id "441003"] [msg "bot downloader Cache-Control no-cache gak punya cookies dan diluar REQUEST_LINE line"] [data "Matched Data: no-cache found within REQUEST_LINE: GET /matomo.php?action_name=Prakiraan%20Awal%20Musim%20Hujan%20Tahun%202023%20-%202024%20Zona%20Musim%20di%20Provinsi%20Jawa%20Timur&idsite=3&rec=1&r=206712&h=8&m=38&s=7&url=https%3A%2F%2Fstaklim-malang.info%2Findex.php%2Fprofil%2Fmeteorologi ... show less	Hacking Hacking Web App Attack Web App Attack
MAGIC	2024-06-17 15:05:13 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack DDoS Attack Bad Web Bot Bad Web Bot
MAGIC	2024-06-09 08:03:28 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-05-30 13:05:35 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-05-18 19:00:32 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot