JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.237.131.215

135.237.131.215 was found in our database!

This IP was reported 319 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.237.131.215

Whois 135.237.131.215

IP Abuse Reports for 135.237.131.215:

This IP address has been reported a total of 319 times from 31 distinct sources. 135.237.131.215 was first reported on October 16th 2024, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2025-12-15 08:09:21 (7 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 215.131.237.135.rbl.mal ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 215.131.237.135.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇦🇺 MAGIC	2025-12-07 00:21:09 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2025-11-23 18:14:58 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/ ua=' ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/ ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2025-11-20 22:37:26 (7 months ago)	coe-88 : Bloc AI bots=>/en/component/joaktree/descendants-0-4/3!I827(ai.)	Hacking
🇺🇸 nodepile	2025-11-17 21:24:10 (7 months ago)	UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method= ... show more UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method=GET path=/1999-2005-vw-golf-mk-iv-gti-mk-4-ecode-projector-glass-lens-headlight-made-by-depo.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-11-07 04:23:46 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-26 04:52:06 (8 months ago)	[Sun Oct 26 11:28:37.203187 2025] [security2:error] [pid 269831:tid 140451326695104] [client 135.237 ... show more [Sun Oct 26 11:28:37.203187 2025] [security2:error] [pid 269831:tid 140451326695104] [client 135.237.131.215:40418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/32 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/32"] [unique_id "aP2jdT5VszmlwQYaEwQWWgADFgY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[269838] [p0tnN0hihHQ] [aP2jdT5VszmlwQYaEwQWWgADFgY] keep_alive=[1] [2025-10-26 11:28:37.203193] [R:aP2jdT5VszmlwQYaEwQWWgADFgY] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); comp ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-10-11 01:15:43 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-09-06 14:14:49 (10 months ago)	[Sat Sep 06 21:10:53.516076 2025] [security2:error] [pid 209620:tid 140348891256512] [client 135.237 ... show more [Sat Sep 06 21:10:53.516076 2025] [security2:error] [pid 209620:tid 140348891256512] [client 135.237.131.215:37372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562011-prediksi-bulanan-sifat-hujan-bulan-september-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562011-prediksi-bulanan-sifat-hujan-bulan-september-tahun-2025-update-dari-anal ... show less	Hacking Web App Attack
🇺🇸 construct.net	2025-09-06 13:26:37 (10 months ago)	Triggered rate limiter [PRD-VM-WEB2a]	Bad Web Bot
🇮🇩 hermawan	2025-08-29 06:55:35 (10 months ago)	[Fri Aug 29 13:54:06.740797 2025] [security2:error] [pid 338714:tid 140522202064576] [client 135.237 ... show more [Fri Aug 29 13:54:06.740797 2025] [security2:error] [pid 338714:tid 140522202064576] [client 135.237.131.215:52898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555561804-press-release-kewaspadaan-peningkatan-cuaca-ekstrem-di-jawa-timur-pada-tanggal-24-maret-02-april-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555561804-press-release-kewaspadaan-p ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-24 18:51:30 (10 months ago)	[Mon Aug 25 01:50:19.184789 2025] [security2:error] [pid 144511:tid 139747310597824] [client 135.237 ... show more [Mon Aug 25 01:50:19.184789 2025] [security2:error] [pid 144511:tid 139747310597824] [client 135.237.131.215:55271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analisis- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-24 13:57:50 (10 months ago)	[Sun Aug 24 20:51:52.032880 2025] [security2:error] [pid 51929:tid 140090132063936] [client 135.237. ... show more [Sun Aug 24 20:51:52.032880 2025] [security2:error] [pid 51929:tid 140090132063936] [client 135.237.131.215:64077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/perubahan-iklim/126-artikel-perubahan-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/perubahan-iklim/126-artikel-perubahan-iklim"] [unique_id "aKsY-N_W0VZ5qrL8vbt0rQADgBI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[51948] [us26vdyl/WM] [aKsY-N_W0VZ5qrL8vbt0rQADgBI] keep_alive=[1] [2025-08-24 20:51:52.032884] [R:aKsY-N_W0VZ5qrL ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-24 13:41:12 (10 months ago)	[Sun Aug 24 20:30:04.184088 2025] [security2:error] [pid 28955:tid 140090090100416] [client 135.237. ... show more [Sun Aug 24 20:30:04.184088 2025] [security2:error] [pid 28955:tid 140090090100416] [client 135.237.131.215:32926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bul ... show less	Hacking Web App Attack
🇭🇳 unph	2025-08-24 02:18:55 (10 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force

Showing 1 to 15 of 319 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.201

🇧🇾 178.120.149.237

🇳🇱 160.119.76.64

🇺🇸 157.245.245.246

🇨🇳 111.113.88.223

🇬🇧 51.89.199.115

🇺🇸 44.21.21.152

🇧🇪 34.14.6.98

🇩🇪 2a09:bac5:2f18:1b4b::2b8:55

🇹🇼 198.235.24.39

🇺🇸 103.203.57.15

🇺🇸 64.62.156.222

🇵🇭 45.250.157.82

🇺🇸 44.121.35.93

🇺🇸 205.210.31.90

🇹🇼 198.235.24.55

🇨🇳 182.242.169.20

🇨🇳 180.153.236.24

🇨🇳 119.48.135.86

🇭🇰 118.193.32.119