JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.133.131

64.236.133.131 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 22%: ?

22%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.133.131

Whois 64.236.133.131

IP Abuse Reports for 64.236.133.131:

This IP address has been reported a total of 27 times from 23 distinct sources. 64.236.133.131 was first reported on July 29th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-05 20:25:25 (1 week ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /careers (+15 more) \| ua: Mozil ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /careers (+15 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \| 2026-09-05 20:25 UTC show less	Port Scan Web App Attack
🇺🇸 mnsf	2026-09-05 20:05:19 (1 week ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇯🇵 SentinalX by uzumaru	2026-08-17 07:05:53 (4 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:443 show less	Open Proxy Port Scan
🇮🇹 VHosting	2026-08-09 14:25:04 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇧🇷 SOC-BR	2026-06-02 07:24:50 (3 months ago)	Attack detected by Fortinet - web_server: HTPasswd.Access - 2026-06-01 22:59:35 - Source Port 55559	Port Scan Hacking
🇮🇩 sockominfo	2026-06-02 05:00:38 (3 months ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 6/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 84%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 mashamal	2026-06-02 03:47:00 (3 months ago)	Vulnerability Probe ...	Web App Attack
🇮🇪 AutosOnShow	2026-06-02 02:34:05 (3 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-02 02:33:40.590 \|	Web App Attack
🇳🇱 ParaBug	2026-06-02 01:54:46 (3 months ago)	64.236.133.131 - - [02/Jun/2026:03:54:45 +0200] "GET /.git/HEAD HTTP/1.1" 403 403 "-" "Mozilla/5.0 ( ... show more 64.236.133.131 - - [02/Jun/2026:03:54:45 +0200] "GET /.git/HEAD HTTP/1.1" 403 403 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Phishing Brute-Force Web App Attack
🇭🇰 Harold Wong	2026-06-02 00:43:32 (3 months ago)	$f2bV_matches	Brute-Force
🇺🇸 xmission.com	2026-06-02 00:18:44 (3 months ago)	Blocked by UFW (TCP on 2087) Source port: 55876 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 55876 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 64.236.133.131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-06-02 00:08:55 (3 months ago)	Port Scan ...	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 00:06:37 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 64.236.133.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.133.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 20:06:31.129146 2026] [security2:error] [pid 28926:tid 28931] [client 64.236.133.131:55691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.85"] [uri "/.env.production"] [unique_id "ah4ehyKIKbxPpavjUpQ0JAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-02 00:05:02 (3 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-01 23:21:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 64.236.133.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.133.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 19:21:04.626561 2026] [security2:error] [pid 14608:tid 14682] [client 64.236.133.131:56089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.21"] [uri "/.git/HEAD"] [unique_id "ah4T4PFVmMu33Z3E1QwmJwAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.126

🇷🇴 193.32.162.155

🇰🇷 121.178.185.141

🇺🇸 68.225.62.216

🇧🇷 16.5.0.236

🇺🇸 13.221.244.3

🇪🇹 196.191.144.123

🇳🇱 195.178.110.30

🇵🇱 176.53.159.196

🇮🇳 154.29.231.182

🇺🇸 66.249.70.200

🇰🇷 59.8.50.83

🇧🇷 201.28.176.31

🇻🇪 200.8.235.239

🇺🇦 188.163.75.106

🇺🇸 174.192.72.64

🇻🇳 160.30.157.211

🇮🇳 103.70.40.36

🇺🇸 66.132.172.234

🇭🇰 34.96.163.154