JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.77.189.142

40.77.189.142 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	msnbot-40-77-189-142.search.msn.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 40.77.189.142 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 40.77.189.142

Whois 40.77.189.142

IP Abuse Reports for 40.77.189.142:

This IP address has been reported a total of 28 times from 9 distinct sources. 40.77.189.142 was first reported on December 18th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Anytech	2026-08-28 06:31:19 (2 weeks ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
🇮🇩 hermawan	2025-06-13 12:02:56 (1 year ago)	[Fri Jun 13 19:02:55.669374 2025] [security2:error] [pid 12731:tid 140221069854400] [client 40.77.18 ... show more [Fri Jun 13 19:02:55.669374 2025] [security2:error] [pid 12731:tid 140221069854400] [client 40.77.189.142:49024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/OneSignalSDKWorker.js"] [unique_id "aEwTb3UmGQd__CAutLUcVgAAmhI"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-all-categories/4163-klimatologi/analisis-klimatologi/analisis-dasarian/distribusi-curah-hujan-dasarian-propinsi-jawa-timur/analisis-dasarian-distribusi-curah-hujan-provins ... show less	Hacking Web App Attack
🇹🇼 kk_it_man	2025-06-13 00:03:06 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇹🇼 kk_it_man	2025-05-15 17:33:04 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇹🇼 kk_it_man	2025-04-23 13:43:05 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇮🇩 hermawan	2025-04-18 15:50:28 (1 year ago)	[Fri Apr 18 22:49:42.880893 2025] [security2:error] [pid 899283:tid 139683988227776] [client 40.77.1 ... show more [Fri Apr 18 22:49:42.880893 2025] [security2:error] [pid 899283:tid 139683988227776] [client 40.77.189.142:9857] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI outside range: 32-36,38-126. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2638"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /images/Klimatologi/ found within REQUEST_URI: /images/Klimatologi/Prakiraan/Peringatan_Dini/2025/03_Maret_2025/24_MARET\\xe2\\x80\\x9302_APRIL_2025/Press_Release_Kewaspadaan_Peningkatan_Cuaca_Ekstrem_Di_Jawa_Timur_Pada_Tanggal_24_Maret-02_April_2025.webp request_line = GET /images/Klimatologi/Prakiraan/Peringatan_Dini/2025/03_Maret_2025/24_MARET%E2%80%9302_APRIL_2025/Press_Release_Kewaspadaan_Peningkat..."] [severity "CRITICAL"] [ver "OWASP_CRS/4.10.0"] [tag ... show less	Hacking Web App Attack
🇬🇧 NotCool	2025-04-09 18:45:47 (1 year ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 40.77.189.142 (US/United States/msnbot-40-77-189-142. ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 40.77.189.142 (US/United States/msnbot-40-77-189-142.search.msn.com): 10 in the last 3600 secs show less	Bad Web Bot
🇮🇩 hermawan	2025-04-01 07:45:25 (1 year ago)	[Tue Apr 01 14:43:45.930826 2025] [security2:error] [pid 272174:tid 139976903743168] [client 40.77.1 ... show more [Tue Apr 01 14:43:45.930826 2025] [security2:error] [pid 272174:tid 139976903743168] [client 40.77.189.142:9990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = POST /matomo.php?ping=1&idsite=1&rec=1&r=411048&h=0&m=43&s=44&url=https%3A%2F%2Fstaklim-jatim.bmkg.go.id%2Findex.php%2Fprofil%2Fmeteorologi%2Flist-all-categories%2F4267-konferensi-pers%2Frilis-prediksi-musim-hujan-2024-2025-di-provinsi-jawa-timur&_id=028a9a0798fc978d&_idn=0&send_image=0&_refts=..."] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/matomo.php"] [unique_id "Z-uZMQRN1nEVk ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-03-29 04:56:31 (1 year ago)	[Sat Mar 29 11:49:58.290313 2025] [security2:error] [pid 595842:tid 140480762803904] [client 40.77.1 ... show more [Sat Mar 29 11:49:58.290313 2025] [security2:error] [pid 595842:tid 140480762803904] [client 40.77.189.142:9988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z-d79nzaN_yRs04VuDTi8wAACx8"], referer https://staklim-malang.info/index.php/analisis-bulanan/4129-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-tahun-2022/555559340-ana ... show less	Hacking Web App Attack
🇹🇼 kk_it_man	2025-03-16 09:33:05 (1 year ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan
🇨🇳 ThreatBook.io	2025-01-28 00:12:00 (1 year ago)	ThreatBook Intelligence: Search Engine Crawler,Whitelist more details on https://threatbook.io/ip/40 ... show more ThreatBook Intelligence: Search Engine Crawler,Whitelist more details on https://threatbook.io/ip/40.77.189.142 2025-01-27 12:33:27 /tomcat.css show less	Web App Attack
Anonymous	2024-10-23 16:33:05 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2024-10-08 17:33:52 (1 year ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2024-05-04 01:25:53 (2 years ago)	(mod_security) mod_security (id:243420) triggered by 40.77.189.142 (msnbot-40-77-189-142.search.msn. ... show more (mod_security) mod_security (id:243420) triggered by 40.77.189.142 (msnbot-40-77-189-142.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 03 21:25:46.041383 2024] [security2:error] [pid 27724:tid 47111152961280] [client 40.77.189.142:9984] [client 40.77.189.142] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.theyogicat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.theyogicat.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ZjWOlEq3Dj1jbh2EZfid5AAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2023-10-06 11:53:05 (2 years ago)	ET SCAN Bing Webcrawler User-Agent (BingBot)	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 154.83.12.89

🇦🇷 131.255.183.182

🇳🇱 81.19.216.102

🇩🇪 34.185.203.113

🇦🇮 204.14.250.164

🇷🇴 193.32.162.84

🇧🇷 191.183.199.170

🇦🇷 181.26.174.194

🇳🇱 176.65.148.6

🇺🇸 172.208.48.177

🇧🇷 170.80.78.85

🇧🇷 138.97.67.85

🇮🇳 121.242.112.205

🇨🇳 111.196.212.139

🇩🇰 104.22.69.68

🇳🇱 89.248.172.14

🇷🇺 85.174.42.160

🇫🇷 82.66.103.143

🇺🇸 40.124.123.24

🇫🇮 35.228.111.210