JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.77.66.104

40.77.66.104

Neutral Activity

14 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

40.77.66.104 has been reported 14 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 40.77.66.104:

This IP address has been reported a total of 14 times from 10 distinct sources. 40.77.66.104 was first reported on January 11th 2023, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2025-11-25 01:21:44 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 exxos	2025-10-13 07:05:52 (10 months ago)	Attacks with Bad user agents	Hacking
🇺🇸 TPI-Abuse	2025-09-28 09:48:47 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 40.77.66.104 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 40.77.66.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 28 05:48:41.286838 2025] [security2:error] [pid 15975:tid 15975] [client 40.77.66.104:13640] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.g-peopleland.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.g-peopleland.com"] [uri "/Backlite.htm/mailto:[email protected]"] [unique_id "aNkEeQYGG48RUg9x-cnn3AAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 ISPLtd	2025-09-25 20:20:43 (11 months ago)	Null or bogus user agents. Direct requests or fake referrer.	Port Scan Bad Web Bot
🇺🇸 EricTheRedFL	2023-01-17 13:26:28 (3 years ago)	...	Port Scan Brute-Force
🇺🇸 Zandro	2023-01-16 05:00:00 (3 years ago)	massive leech: ~10/s, all filetypes, 5966+ IPs, all in ranges owned by MS	Bad Web Bot
🇷🇺 ITShelter Security	2023-01-16 05:00:00 (3 years ago)	Agressive botnet (~6000IPs)	Bad Web Bot Exploited Host Web App Attack
🇷🇺 ITShelter Security	2023-01-15 05:00:00 (3 years ago)	Agressive botnet (~6000IPs)	Bad Web Bot Exploited Host Web App Attack
🇨🇭 brown rabbit	2023-01-14 19:18:22 (3 years ago)	Concurrent PDF download via ~6000 different IP addresses. robots.txt disallow PDF download. Most (or ... show more Concurrent PDF download via ~6000 different IP addresses. robots.txt disallow PDF download. Most (or all?) IP are registered to microsoft.com show less	Bad Web Bot
Anonymous	2023-01-12 05:09:25 (3 years ago)	40.77.66.104 - - [11/Jan/2023:18:29:23 +0100] "GET /user/user.php?id=1521 HTTP/1.1" 404 5895 "-" "Mo ... show more 40.77.66.104 - - [11/Jan/2023:18:29:23 +0100] "GET /user/user.php?id=1521 HTTP/1.1" 404 5895 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 40.77.66.104 - - [11/Jan/2023:23:19:38 +0100] "GET /user/user.php?id=1635 HTTP/1.1" 404 5895 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 40.77.66.104 - - [12/Jan/2023:00:29:02 +0100] "GET /dpforum/printthread.php?id=136&amp HTTP/1.1" 404 5895 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 40.77.66.104 - - [12/Jan/2023:06:09:24 +0100] "GET /phpclassifieds/?kid=1&catname=&tall=&order=sitetitle&searchword=&s_userid=620&adv=1 HTTP/1.1" 404 5895 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" ... show less	Hacking Bad Web Bot
🇨🇭 brown rabbit	2023-01-11 20:50:11 (3 years ago)	Concurrent PDF download via ~6000 different IP addresses. robots.txt disallow PDF download. Most (or ... show more Concurrent PDF download via ~6000 different IP addresses. robots.txt disallow PDF download. Most (or all?) IP are registered to microsoft.com show less	Bad Web Bot
Anonymous	2023-01-11 16:48:43 (3 years ago)	Too many 4XX's	Hacking Web App Attack
🇺🇸 EricTheRedFL	2023-01-11 11:27:00 (3 years ago)	...	Port Scan Brute-Force
🇺🇸 EricTheRedFL	2023-01-11 03:31:52 (3 years ago)	Jan 10 22:31:48 egress kernel: \[2101228.489307\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=50:7b ... show more Jan 10 22:31:48 egress kernel: \[2101228.489307\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=50:7b:9d:3b:b7:46:c4:ca:2b:5b:10:df:08:00 SRC=40.77.66.104 DST=174.176.51.233 LEN=52 TOS=0x00 PREC=0x20 TTL=39 ID=19956 DF PROTO=TCP SPT=49736 DPT=8091 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 10 22:31:49 egress kernel: \[2101229.514822\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=50:7b:9d:3b:b7:46:c4:ca:2b:5b:10:df:08:00 SRC=40.77.66.104 DST=174.176.51.233 LEN=52 TOS=0x00 PREC=0x20 TTL=39 ID=19957 DF PROTO=TCP SPT=49736 DPT=8091 WINDOW=65535 RES=0x00 SYN URGP=0 Jan 10 22:31:51 egress kernel: \[2101231.530692\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=50:7b:9d:3b:b7:46:c4:ca:2b:5b:10:df:08:00 SRC=40.77.66.104 DST=174.176.51.233 LEN=52 TOS=0x00 PREC=0x20 TTL=39 ID=19958 DF PROTO=TCP SPT=49736 DPT=8091 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.204.138.35

🇺🇸 173.239.211.212

🇺🇸 165.154.135.161

🇫🇮 147.185.133.25

🇨🇳 114.139.56.239

🇧🇬 109.160.32.117

🇮🇳 103.179.230.10

🇮🇳 103.168.241.32

🇸🇪 91.189.92.23

🇺🇸 91.189.91.83

🇭🇰 46.247.61.248

🇺🇸 20.127.197.154

🇧🇴 190.129.122.185

🇿🇦 102.215.242.31

🇺🇸 66.132.224.90

🇨🇱 34.176.165.81

🇺🇸 20.40.218.246

🇷🇴 2.57.122.53

🇱🇰 220.247.224.226

🇺🇸 193.36.224.161