JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.131.240

64.236.131.240 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.131.240

Whois 64.236.131.240

IP Abuse Reports for 64.236.131.240:

This IP address has been reported a total of 116 times from 51 distinct sources. 64.236.131.240 was first reported on September 17th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-06-13 10:52:27 (20 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: captive.apple.com:80 show less	Open Proxy Port Scan
🇦🇹 urnilxfgbez	2026-06-11 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇼 kk_it_man	2026-06-11 08:50:12 (2 days ago)		Port Scan
🇧🇪 delabiemedia.be	2026-06-11 08:03:24 (2 days ago)	64.236.131.240 - - [11/Jun/2026:10:03:11 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ... show more 64.236.131.240 - - [11/Jun/2026:10:03:11 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 64.236.131.240 - - [11/Jun/2026:10:03:16 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 64.236.131.240 - - [11/Jun/2026:10:03:19 +0200] "GET /.env.local HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 64.236.131.240 - - [11/Jun/2026:10:03:20 +0200] "GET /.env.production HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 64.236.131.240 - - [11/Jun/2026:10:03:24 +0200] "GET /.env.backup HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 07:58:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 64.236.131.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.131.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 03:58:53.992533 2026] [security2:error] [pid 31987:tid 31987] [client 64.236.131.240:65205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.171"] [uri "/.git/HEAD"] [unique_id "aipqvZL5Ebr64Shwtjf1WAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-06-11 06:14:31 (3 days ago)	Too many 404 requests [BY]	Web App Attack
🇫🇮 6kilowatti	2026-06-11 04:25:33 (3 days ago)	2026-06-11T07:25:32.435798+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-11T07:25:32.435798+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=64.236.131.240 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=43284 DF PROTO=TCP SPT=64658 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇸🇬 WMK965	2026-06-11 03:41:08 (3 days ago)	64.236.131.240 - - [11/Jun/2026:11:41:02 +0800] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Ma ... show more 64.236.131.240 - - [11/Jun/2026:11:41:02 +0800] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "-" 64.236.131.240 - - [11/Jun/2026:11:41:06 +0800] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" "-" 64.236.131.240 - - [11/Jun/2026:11:41:07 +0800] "GET /.env.production HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" show less	Port Scan Web App Attack
Anonymous	2026-04-25 12:02:07 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 pduggusa	2026-04-14 02:34:22 (2 months ago)	Detected attacking dugganusa.com at 2026-04-14T02:34:22.494Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-04-14T02:34:22.494Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-04-14 01:33:46 (2 months ago)	Detected attacking dugganusa.com at 2026-04-14T01:33:46.608Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-04-14T01:33:46.608Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-04-14 00:33:15 (2 months ago)	Detected attacking dugganusa.com at 2026-04-14T00:33:15.028Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-04-14T00:33:15.028Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-04-13 03:31:43 (2 months ago)	Detected attacking dugganusa.com at 2026-04-13T03:31:43.107Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-04-13T03:31:43.107Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇧🇾 lns.bz	2026-04-10 01:29:14 (2 months ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 01:22:20 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.236.131.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.131.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 21:22:14.069011 2026] [security2:error] [pid 1333203:tid 1333203] [client 64.236.131.240:5384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carboncreekwood.com"] [uri "/.git/config"] [unique_id "adhQxpNAkPbCXfdqHrLY_gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.19.109.169

🇩🇪 144.76.119.9

🇨🇳 111.38.136.211

🇺🇸 104.152.52.137

🇮🇩 103.164.172.10

🇫🇮 95.216.252.68

🇬🇧 87.236.176.124

🇺🇸 45.156.129.85

🇭🇰 45.142.154.10

🇺🇸 20.64.105.248

🇺🇸 18.224.58.116

🇨🇳 218.77.90.44

🇳🇱 204.76.203.15

🇧🇩 182.48.68.82

🇧🇷 177.125.36.60

🇨🇳 111.36.36.125

🇺🇸 45.156.129.87

🇮🇷 37.32.10.237

🇧🇷 34.95.228.138

🇺🇸 4.150.201.26