JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.133.130

64.236.133.130 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 39%: ?

39%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.133.130

Whois 64.236.133.130

IP Abuse Reports for 64.236.133.130:

This IP address has been reported a total of 29 times from 23 distinct sources. 64.236.133.130 was first reported on August 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-07-18 04:42:41 (1 day ago)	64.236.133.130 - - [17/Jul/2026:23:42:39 -0500] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 40 ... show more 64.236.133.130 - - [17/Jul/2026:23:42:39 -0500] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 64.236.133.130 - - [17/Jul/2026:23:42:39 -0500] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 64.236.133.130 - - [17/Jul/2026:23:42:39 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 64.236.133.130 - - [17/Jul/2026:23:42:40 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 403 344 "-" "-" 64.236.133.130 - - [17/Jul/2026:23:42:40 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 SentinalX by uzumaru	2026-07-18 04:41:51 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: speed.cloudflare.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-06-27 10:36:17 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: captive.apple.com:80 show less	Open Proxy Port Scan
🇩🇪 ISPLtd	2026-06-02 11:08:25 (1 month ago)	Jun 2 08:08:25 64.236.133.130 TCP SPT=13185 DPT=2086 SYN Jun 2 08:08:25 64.236.133.130 TCP SPT=132 ... show more Jun 2 08:08:25 64.236.133.130 TCP SPT=13185 DPT=2086 SYN Jun 2 08:08:25 64.236.133.130 TCP SPT=13219 DPT=8443 SYN Jun 2 08:08:25 64.236.133.130 TCP SPT=13208 DPT=8080 ... show less	Port Scan
🇧🇪 sid3windr	2026-06-02 10:37:17 (1 month ago)	GET /.env (Tarpitted for , wasted 120B)	Web App Attack
🇺🇸 RAP	2026-06-02 10:09:56 (1 month ago)	2026-06-02 10:09:56 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇦🇺 Telemetry2U.com	2026-06-02 09:58:39 (1 month ago)	Unauthorized connection attempt to port 8080	Hacking
🇺🇸 TPI-Abuse	2026-06-02 09:33:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.236.133.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.133.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 05:33:41.664471 2026] [security2:error] [pid 20902:tid 20902] [client 64.236.133.130:11283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.53"] [uri "/.git/HEAD"] [unique_id "ah6jdbUvu1VFjoRTiaiy6gAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-06-02 08:30:13 (1 month ago)		Port Scan
🇩🇪 iNetWorker	2026-06-01 04:44:41 (1 month ago)	trying to access non-authorized port	Port Scan
🇺🇸 drewf.ink	2026-06-01 03:11:05 (1 month ago)	[03:11] Port scanning. Port(s) scanned: TCP/2086, TCP/2087	Port Scan
Anonymous	2026-06-01 03:07:11 (1 month ago)	Unauthorized access (tcp/80/http)	Port Scan Web App Attack
🇩🇪 ValtonTahiri	2026-06-01 01:53:22 (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=64.236.133.130; proto=TCP; source_port=3072; target_port=2087; flags=SYN show less	Port Scan
🇫🇷 GabrielJST	2026-06-01 01:49:12 (1 month ago)	Port Scan detected from 64.236.133.130 (US/United States/-).	Port Scan
🇨🇦 Blinker73	2026-06-01 01:39:49 (1 month ago)	2026-05-31T21:39 kernel: OUT= SRC=64.236.133.130 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=16988 DF ... show more 2026-05-31T21:39 kernel: OUT= SRC=64.236.133.130 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=16988 DF PROTO=TCP SPT=3072 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T21:39 kernel: OUT= SRC=64.236.133.130 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=35801 DF PROTO=TCP SPT=3072 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T21:39 kernel: OUT= SRC=64.236.133.130 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=46326 DF PROTO=TCP SPT=3072 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 85.172.8.147

🇦🇹 2620:171:e5:f006:9999::249

🇧🇷 200.110.203.69

🇵🇱 154.36.64.116

🇺🇸 153.66.28.132

🇳🇱 91.92.243.247

🇫🇷 85.217.140.53

🇺🇸 74.82.47.50

🇫🇷 46.105.132.33

🇺🇸 20.65.193.1

🇮🇪 3.251.80.159

🇺🇸 174.18.52.24

🇺🇸 172.253.221.26

🇺🇸 142.93.63.222

🇮🇳 103.216.145.2

🇮🇳 103.183.35.112

🇧🇪 84.195.165.136

🇨🇳 58.53.128.103

🇸🇬 47.84.131.144

🇯🇵 8.216.5.249