JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.237.131.217

135.237.131.217 was found in our database!

This IP was reported 309 times. Confidence of Abuse is 1%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.237.131.217

Whois 135.237.131.217

IP Abuse Reports for 135.237.131.217:

This IP address has been reported a total of 309 times from 31 distinct sources. 135.237.131.217 was first reported on October 13th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-06-24 10:44:16 (4 weeks ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 nodepile	2025-12-09 02:57:19 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-15-17-lexus-rc300-rc350-f-sport-silkblaze-style-full-lip-kit-conversion-pp.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-21 20:57:24 (8 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-94-97-acura-integra-2dr-hatchback-only-rear-apron-bumper-lip.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-15 19:26:42 (8 months ago)	UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method= ... show more UA claims known bot but reverse & forward DNS checks do not match official ranges (tenant=82 method=GET path=/tpms-tire-pressure-monitor-sensor-433-mhz-fit-bmw-e53-e60-e63-e65-e70-e71-e82-e83-e85-e88-e89-e90-e91-e92-e93-f01-f02-1-3-5-7-series-m3-x3-x5-x6-z4-oem-replacement-36236781847.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-08 21:18:23 (8 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/fits-01-07-mercedes-w203-c230-c240 ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/fits-01-07-mercedes-w203-c230-c240-c280-cl-black-hood-grille.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-11-03 03:15:19 (8 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/ ua='Mozilla/5.0 AppleWebKit/537.3 ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/ ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Open Proxy VPN IP
🇦🇺 MAGIC	2025-10-31 00:01:59 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-19 17:59:09 (9 months ago)	[Mon Oct 20 00:57:51.551256 2025] [security2:error] [pid 2346662:tid 140210170980032] [client 135.23 ... show more [Mon Oct 20 00:57:51.551256 2025] [security2:error] [pid 2346662:tid 140210170980032] [client 135.237.131.217:50018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4330-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562425-prediksi-6-bulanan-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4330-praki ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-14 15:01:27 (9 months ago)	[Tue Oct 14 21:58:49.765252 2025] [security2:error] [pid 2927204:tid 140020774487744] [client 135.23 ... show more [Tue Oct 14 21:58:49.765252 2025] [security2:error] [pid 2927204:tid 140020774487744] [client 135.237.131.217:10806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4330-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562425-prediksi-6-bulanan-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4330-praki ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-07 07:10:11 (9 months ago)	[Tue Oct 07 14:09:40.983091 2025] [security2:error] [pid 177398:tid 139671074936512] [client 135.237 ... show more [Tue Oct 07 14:09:40.983091 2025] [security2:error] [pid 177398:tid 139671074936512] [client 135.237.131.217:41526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aOS8tBy3IFzkgAC38KV7xwADARc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[177423] [wrhsQEw3gdA] [aOS8tBy3IFzkgAC38KV7xwADARc] keep_alive=[1] [2025-10-07 14:09:40.983097] [R:aOS8tBy3IFzkgAC38KV7xwADARc] UA:' ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-04 06:38:41 (9 months ago)	[Sat Oct 04 13:38:03.375505 2025] [security2:error] [pid 365499:tid 140074835404480] [client 135.237 ... show more [Sat Oct 04 13:38:03.375505 2025] [security2:error] [pid 365499:tid 140074835404480] [client 135.237.131.217:44132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-anal ... show less	Hacking Web App Attack
🇺🇸 octageeks.com	2025-10-01 04:07:51 (9 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇮🇩 hermawan	2025-10-01 01:07:11 (9 months ago)	[Wed Oct 01 08:03:17.109051 2025] [security2:error] [pid 260612:tid 140132685399744] [client 135.237 ... show more [Wed Oct 01 08:03:17.109051 2025] [security2:error] [pid 260612:tid 140132685399744] [client 135.237.131.217:38254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/geofisika/4209-gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/4209-gempa-terkini"] [unique_id "aNx91aDmiSnPkGONmTcZHAAB0ws"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[260624] [cM4Hb44AyE8] [aNx91aDmiSnPkGONmTcZHAAB0ws] keep_alive=[1] [2025-10-01 08:03:17.109058] [R:aNx91aDmiSnPkGONmTcZHAAB0ws] UA:'Mozi ... show less	Hacking Web App Attack
🇩🇪 MaxSmartCode	2025-09-26 00:58:25 (9 months ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
🇮🇩 hermawan	2025-09-21 11:10:24 (10 months ago)	[Sun Sep 21 18:09:37.656361 2025] [security2:error] [pid 1046046:tid 139919048468160] [client 135.23 ... show more [Sun Sep 21 18:09:37.656361 2025] [security2:error] [pid 1046046:tid 139919048468160] [client 135.237.131.217:42648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4086-klimatologi/infografis/infografis-klimatologi/infografis-bulanan/infografis-bulanan-iklim-ekstrim/infografis-bulanan-iklim-ekstrim-tahun-2021/555559146-infografis-bulanan-iklim-ekstrim-bulan-november-tahun-2021-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4086-klimatologi/ ... show less	Hacking Web App Attack

Showing 1 to 15 of 309 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.217.128.6

🇫🇷 185.177.72.54

🇺🇸 52.176.211.73

🇳🇱 20.56.26.13

🇳🇱 195.178.110.227

🇬🇧 188.240.59.47

🇧🇷 177.157.215.222

🇦🇷 148.222.130.121

🇳🇱 94.228.209.182

🇲🇾 85.211.242.19

🇺🇸 45.132.227.5

🇸🇴 197.220.92.185

🇺🇸 192.169.180.166

🇲🇴 182.93.7.194

🇯🇵 164.52.24.189

🇨🇳 124.117.195.234

🇬🇭 102.223.92.101

🇺🇸 74.249.245.134

🇸🇪 185.217.1.246

🇮🇩 180.254.224.101