AbuseIPDB » 52.159.227.36

52.159.227.36 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 33%: ?

33%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.159.227.36

Whois 52.159.227.36

IP Abuse Reports for 52.159.227.36:

This IP address has been reported a total of 112 times from 8 distinct sources. 52.159.227.36 was first reported on April 3rd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
hermawan	2025-05-23 19:31:42 (1 month ago)	[Sat May 24 02:28:44.161658 2025] [security2:error] [pid 55183:tid 140399843698368] [client 52.159.2 ... show more[Sat May 24 02:28:44.161658 2025] [security2:error] [pid 55183:tid 140399843698368] [client 52.159.227.36:23411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aDDMbDpR8raJbPAvhay0-AAAYwk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[55193] [VnA6m4rtyLQ] [aDDMbDpR8raJbPAvhay0-AAAYwk] keep_alive=[1] [2025-05-24 02:28:44.161663] [R:aDDMbDpR8raJbPAvhay0-AAAYwk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/ ... show less	Hacking Web App Attack
SCHAPPY	2025-05-23 10:28:11 (1 month ago)	Bad bot identified by user agent	Bad Web Bot
hermawan	2025-05-23 04:48:52 (1 month ago)	[Fri May 23 11:20:01.492018 2025] [security2:error] [pid 10490:tid 140474215012032] [client 52.159.2 ... show more[Fri May 23 11:20:01.492018 2025] [security2:error] [pid 10490:tid 140474215012032] [client 52.159.227.36:2577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aC_3cb3uf8jmkRqhQwR9DAAAXgk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[10500] [k5tr6Z1ZRAI] [aC_3cb3uf8jmkRqhQwR9DAAAXgk] keep_alive=[1] [2025-05-23 11:20:01.492030] [R:aC_3cb3uf8jmkRqhQwR9DAAAXgk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/b ... show less	Hacking Web App Attack
MAGIC	2025-05-23 01:14:43 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hermawan	2025-05-21 15:15:47 (1 month ago)	[Wed May 21 22:15:46.381105 2025] [security2:error] [pid 148272:tid 140247712102080] [client 52.159. ... show more[Wed May 21 22:15:46.381105 2025] [security2:error] [pid 148272:tid 140247712102080] [client 52.159.227.36:62708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561138-prakiraan-bulanan-curah-hujan-di-kabupaten-situbondo-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561138-prakiraan-bulanan-curah-hujan-di-kabupaten-situbondo-untuk-6-bulan-ke-depan"] [uniqu ... show less	Hacking Web App Attack
hermawan	2025-05-21 03:25:25 (1 month ago)	[Wed May 21 08:58:59.114517 2025] [security2:error] [pid 229389:tid 140381833389760] [client 52.159. ... show more[Wed May 21 08:58:59.114517 2025] [security2:error] [pid 229389:tid 140381833389760] [client 52.159.227.36:18856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/79-klimatologi/analisis-klimatologi/555556680-prosiding-focus-group-discussion-pemutakhiran-zona-musim-di-indonesia-jakarta-2-4-mei-2018-evaluasi-teoretis-klasterisasi-zona-musim-bmkg-dan-alternatifnya-studi-kasus-sulawesi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/79-klimatologi/analisis-klimatologi/ ... show less	Hacking Web App Attack
hermawan	2025-05-20 15:40:34 (1 month ago)	[Tue May 20 21:43:11.774257 2025] [security2:error] [pid 60688:tid 140312421799616] [client 52.159.2 ... show more[Tue May 20 21:43:11.774257 2025] [security2:error] [pid 60688:tid 140312421799616] [client 52.159.227.36:35344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2020 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2020"] [unique_id "aCyU_18pKfl8wTrYKqlkNQAATgw"] [staklim-jatim.bmkg.go.id] [staklim-jatim. ... show less	Hacking Web App Attack
hermawan	2025-05-20 11:05:52 (1 month ago)	[Tue May 20 12:56:35.169734 2025] [security2:error] [pid 327918:tid 139677148247744] [client 52.159. ... show more[Tue May 20 12:56:35.169734 2025] [security2:error] [pid 327918:tid 139677148247744] [client 52.159.227.36:36326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aCwZk_NV_FdUoakneZu4pAAAHiQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[327956] [T9U66TJ1m4M] [aCwZk_NV_FdUoakneZu4pAAAHiQ] keep_alive=[1] [2025-05-20 12:56:35.169737] [R:aCwZk_NV_FdUoakneZu4pAAAHiQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co ... show less	Hacking Web App Attack
hermawan	2025-05-19 15:56:20 (1 month ago)	[Mon May 19 22:54:08.495540 2025] [security2:error] [pid 72034:tid 139680951531200] [client 52.159.2 ... show more[Mon May 19 22:54:08.495540 2025] [security2:error] [pid 72034:tid 139680951531200] [client 52.159.227.36:31589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/klimatologi?start=6500 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/klimatologi"] [unique_id "aCtUID5pvRg_wk9FHmtx3QAASAg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[72043] [Wd5pJIfJbHk] [aCtUID5pvRg_wk9FHmtx3QAASAg] keep_alive=[1] [2025-05-19 22:54:08.495548] [R:aCtUID5pvRg_wk9FHmtx3QAASAg] U ... show less	Hacking Web App Attack
hermawan	2025-05-19 02:45:04 (1 month ago)	[Mon May 19 08:59:36.971139 2025] [security2:error] [pid 593665:tid 140017664517824] [client 52.159. ... show more[Mon May 19 08:59:36.971139 2025] [security2:error] [pid 593665:tid 140017664517824] [client 52.159.227.36:56460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555561738-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555561738-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-januari-tahun-2025-di-p ... show less	Hacking Web App Attack
hermawan	2025-05-17 05:19:07 (1 month ago)	[Sat May 17 12:16:48.834132 2025] [security2:error] [pid 108753:tid 140055901361856] [client 52.159. ... show more[Sat May 17 12:16:48.834132 2025] [security2:error] [pid 108753:tid 140055901361856] [client 52.159.227.36:49943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4293-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2025/555561746-prakiraan-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4293-prakiraan-curah-huj ... show less	Hacking Web App Attack
MAGIC	2025-05-17 04:12:09 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hermawan	2025-05-16 01:51:17 (1 month ago)	[Fri May 16 08:50:46.263026 2025] [security2:error] [pid 130497:tid 140683027371712] [client 52.159. ... show more[Fri May 16 08:50:46.263026 2025] [security2:error] [pid 130497:tid 140683027371712] [client 52.159.227.36:20390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aCaZ9hH0hJw05wDMARWOBwAAWgo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[130508] [O7bCAq8nvI4] [aCaZ9hH0hJw05wDMARWOBwAAWgo] keep_alive=[1] [2025-05-16 08:50:46.263032] [R:aCaZ9hH0hJw05wDMARWOBwAAWgo] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co ... show less	Hacking Web App Attack
hermawan	2025-05-14 03:49:38 (1 month ago)	[Wed May 14 09:00:11.392730 2025] [security2:error] [pid 432327:tid 139992747538112] [client 52.159. ... show more[Wed May 14 09:00:11.392730 2025] [security2:error] [pid 432327:tid 139992747538112] [client 52.159.227.36:44710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4289-klimatologi/prakiraan-klimatologi/peringatan-dini/peringatan-dini-cuaca-dan-iklim-provinsi-jawa-timur/peringatan-dini-cuaca-dan-iklim-provinsi-jawa-timur-tahun-2025/555561672-peringatan-dini-cuaca-dan-iklim-provinsi-jawa-timur-periode-dasarian-ii-januari-2025-tanggal-1..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-c ... show less	Hacking Web App Attack
Anonymous	2025-05-14 00:12:00 (1 month ago)	"Excessive,undesired traffic against library service"	Bad Web Bot

Showing 46 to 60 of 112 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

117.216.35.25

116.110.114.244

47.128.58.95

101.36.112.101

88.202.190.147

64.62.197.149

165.22.90.192

182.60.73.7

193.163.125.117

37.37.147.182

13.74.42.55

183.191.123.89

87.180.7.148

111.225.148.66

125.92.101.86

156.146.56.161

54.226.109.182

114.239.74.230

116.110.114.244

119.164.103.125