AbuseIPDB » 52.159.227.43

52.159.227.43 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 51%: ?

51%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.159.227.43

Whois 52.159.227.43

IP Abuse Reports for 52.159.227.43:

This IP address has been reported a total of 108 times from 12 distinct sources. 52.159.227.43 was first reported on April 3rd 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
hermawan	2025-06-19 12:58:17 (4 hours ago)	[Thu Jun 19 19:57:00.513168 2025] [security2:error] [pid 57731:tid 140234942482112] [client 52.159.2 ... show more[Thu Jun 19 19:57:00.513168 2025] [security2:error] [pid 57731:tid 140234942482112] [client 52.159.227.43:17991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "222"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-musim-hujan-di-propinsi-jawa-timur"] [unique_id "aFQJHFMAZG_QVdmGwsunuwAACxc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[57755] [LkcESOxQ1CE] [aFQJHFMAZG_QVdmGwsunuwAACxc ... show less	Hacking Web App Attack
hermawan	2025-06-19 03:04:51 (14 hours ago)	[Thu Jun 19 10:04:50.379958 2025] [security2:error] [pid 230259:tid 139862159107776] [client 52.159. ... show more[Thu Jun 19 10:04:50.379958 2025] [security2:error] [pid 230259:tid 139862159107776] [client 52.159.227.43:47025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "222"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulananmalangbatu.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananmalangbatu.pdf"] [unique_id "aFN-Un4Uo0TOyPRkXEnRiwAAkAQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[230264] [FANBAuSCcYM] [aFN-Un4Uo0TOyPRkXEnRiwAAkAQ] keep_alive=[1] [2025-06-19 10:04:50.379965] [R:aFN-Un4Uo0TOyPRkXEnRiwAAkAQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-Us ... show less	Hacking Web App Attack
Anonymous	2025-06-17 18:08:42 (1 day ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
hermawan	2025-06-17 02:13:26 (2 days ago)	[Tue Jun 17 09:13:05.391054 2025] [security2:error] [pid 52338:tid 140031436928704] [client 52.159.2 ... show more[Tue Jun 17 09:13:05.391054 2025] [security2:error] [pid 52338:tid 140031436928704] [client 52.159.227.43:7835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "205"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aFDPMbD5zEZdXcHQIv_ydgAAyR0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[52368] [+xaADaPTRvs] [aFDPMbD5zEZdXcHQIv_ydgAAyR0] keep_alive=[1] [2025-06-17 09:13:05.391058] [R:aFDPMbD5zEZdXcHQIv_ydgAAyR0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/b ... show less	Hacking Web App Attack
hermawan	2025-06-16 17:25:35 (2 days ago)	[Tue Jun 17 00:25:34.431139 2025] [security2:error] [pid 113481:tid 140309563434688] [client 52.159. ... show more[Tue Jun 17 00:25:34.431139 2025] [security2:error] [pid 113481:tid 140309563434688] [client 52.159.227.43:30571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "205"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aFBTjrt_NAPeFhjJTBMdMQAAyQE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[113483] [8hP1rqtYXWg] [aFBTjrt_NAPeFhjJTBMdMQAAyQE] keep_alive=[1] [2025-06-17 00:25:34.431143] [R:aFBTjrt_NAPeFhjJTBMdMQAAyQE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co ... show less	Hacking Web App Attack
hermawan	2025-06-15 09:16:53 (4 days ago)	[Sun Jun 15 16:14:42.241544 2025] [security2:error] [pid 392709:tid 140215227152064] [client 52.159. ... show more[Sun Jun 15 16:14:42.241544 2025] [security2:error] [pid 392709:tid 140215227152064] [client 52.159.227.43:34358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aE6PAvgq7mxLQG7P6G7nJQAAhRc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[392733] [be2gtQCkesw] [aE6PAvgq7mxLQG7P6G7nJQAAhRc] keep_alive=[1] [2025-06-15 16:14:42.241560] [R:aE6PAvgq7mxLQG7P6G7nJQAAhRc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co ... show less	Hacking Web App Attack
hermawan	2025-06-13 12:30:07 (6 days ago)	[Fri Jun 13 19:28:57.559819 2025] [security2:error] [pid 23400:tid 140221498422976] [client 52.159.2 ... show more[Fri Jun 13 19:28:57.559819 2025] [security2:error] [pid 23400:tid 140221498422976] [client 52.159.227.43:19157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4009-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2020/555557917-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-april-tahun-2020-update-10-maret-2020 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4009-prakiraan-potensi-banjir/ ... show less	Hacking Web App Attack
MAGIC	2025-06-12 03:09:22 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
hermawan	2025-06-11 08:39:18 (1 week ago)	[Wed Jun 11 15:39:17.998991 2025] [security2:error] [pid 154028:tid 140474500937408] [client 52.159. ... show more[Wed Jun 11 15:39:17.998991 2025] [security2:error] [pid 154028:tid 140474500937408] [client 52.159.227.43:38655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aElAtQyhKuQX39WMyQMpywAAhAA"] [staklim-malang.info] [staklim-malang.info] top=[154029] [exqmv9+fPL0] [aElAtQyhKuQX39WMyQMpywAAhAA] keep_alive=[1] [2025-06-11 15:39:17.998997] [R:aElAtQyhKuQX39WMyQMpywAAhAA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st ... show less	Hacking Web App Attack
hermawan	2025-06-11 02:26:19 (1 week ago)	[Wed Jun 11 09:24:35.185324 2025] [security2:error] [pid 355923:tid 139883061339840] [client 52.159. ... show more[Wed Jun 11 09:24:35.185324 2025] [security2:error] [pid 355923:tid 139883061339840] [client 52.159.227.43:37235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aEjo4xhX2xkiS8K_EtAUmgAA1Rw"] [staklim-malang.info] [staklim-malang.info] top=[355952] [fJaRg5p8DXE] [aEjo4xhX2xkiS8K_EtAUmgAA1Rw] keep_alive=[1] [2025-06-11 09:24:35.185332] [R:aEjo4xhX2xkiS8K_EtAUmgAA1Rw] UA:'Mozilla ... show less	Hacking Web App Attack
hermawan	2025-06-10 14:51:09 (1 week ago)	[Tue Jun 10 21:50:38.853990 2025] [security2:error] [pid 76244:tid 140215522936512] [client 52.159.2 ... show more[Tue Jun 10 21:50:38.853990 2025] [security2:error] [pid 76244:tid 140215522936512] [client 52.159.227.43:6067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561744-prakiraan-bulanan-curah-hujan-bulan-maret-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561744-prakiraan-bulanan-curah-hujan-bulan-mare ... show less	Hacking Web App Attack
hermawan	2025-06-10 03:42:17 (1 week ago)	[Tue Jun 10 10:21:33.299263 2025] [security2:error] [pid 72451:tid 139652739528384] [client 52.159.2 ... show more[Tue Jun 10 10:21:33.299263 2025] [security2:error] [pid 72451:tid 139652739528384] [client 52.159.227.43:33172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim"] [unique_id "aEekvYK3NGBRtvxRFDDCJQACQhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[72476] [gZt2MbegoJk] [aEekvYK3NGBRtvxRFDDCJQACQhg] keep_alive=[1] [2025-06-10 10:21:33.299269] [R:aEekvYK3NGBRtvxRFDDCJQACQhg] UA:' ... show less	Hacking Web App Attack
hermawan	2025-06-09 17:00:35 (1 week ago)	[Tue Jun 10 00:00:08.066686 2025] [security2:error] [pid 1210738:tid 139881513682624] [client 52.159 ... show more[Tue Jun 10 00:00:08.066686 2025] [security2:error] [pid 1210738:tid 139881513682624] [client 52.159.227.43:34075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEcTGL9tvOrk7FND2XRFEQABXA4"] [staklim-malang.info] [staklim-malang.info] top=[1210753] [nbgHgz5O/fQ] [aEcTGL9tvOrk7FND2XRFEQABXA4] keep_alive=[1] [2025-06-10 00:00:08.066692] [R:aEcTGL9tvOrk7FND2XRFEQABXA4] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:' ... show less	Hacking Web App Attack
hermawan	2025-06-08 15:46:10 (1 week ago)	[Sun Jun 08 22:44:20.642312 2025] [security2:error] [pid 567864:tid 139881853478592] [client 52.159. ... show more[Sun Jun 08 22:44:20.642312 2025] [security2:error] [pid 567864:tid 139881853478592] [client 52.159.227.43:53920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEWv1NZXlE6PpMc9HJ1F_QAARgA"] [staklim-malang.info] [staklim-malang.info] top=[567865] [SEYzVgn6hB0] [aEWv1NZXlE6PpMc9HJ1F_QAARgA] keep_alive=[1] [2025-06-08 22:44:20.642318] [R:aEWv1NZXlE6PpMc9HJ1F_QAARgA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st ... show less	Hacking Web App Attack
hermawan	2025-06-06 06:13:29 (1 week ago)	[Fri Jun 06 13:09:15.409658 2025] [security2:error] [pid 32029:tid 140416527623872] [client 52.159.2 ... show more[Fri Jun 06 13:09:15.409658 2025] [security2:error] [pid 32029:tid 140416527623872] [client 52.159.227.43:12268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aEKGCyx6d7Eu59symg4U-QAAhwI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[32032] [36jYEXnuXIo] [aEKGCyx6d7Eu59symg4U-QAAhwI] keep_alive=[1] [2025-06-06 ... show less	Hacking Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩