JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.236.134.225

Neutral Activity

Abuse confidence score ?

0% Low Risk

235 reports

124 reporters · latest 1 month ago

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 64.236.134.225

Export CSV

This IP address has been reported a total of 235 times from 124 distinct sources. 64.236.134.225 was first reported on December 14th 2025, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Italy with 1 report. The only category in these recent reports was: Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-08-18 06:05:03 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇯🇵 SentinalX by uzumaru	2026-08-15 07:12:05 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: youpass.vn:443:443 show less	Open Proxy Port Scan
🇩🇪 www.fransveldman.world	2026-07-16 11:56:55 (2 months ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇺🇸 Rayulcifer	2026-06-23 01:02:47 (3 months ago)	[Mon Jun 22 19:58:13.825947 2026] [access_compat:error] [pid 2430683:tid 124099472856768] [client 64 ... show more [Mon Jun 22 19:58:13.825947 2026] [access_compat:error] [pid 2430683:tid 124099472856768] [client 64.236.134.225:14336] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Mon Jun 22 19:58:20.482779 2026] [access_compat:error] [pid 2430683:tid 124099498034880] [client 64.236.134.225:14336] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Mon Jun 22 20:02:33.158122 2026] [access_compat:error] [pid 2479418:tid 124098340431552] [client 64.236.134.225:14272] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Mon Jun 22 20:02:44.732374 2026] [access_compat:error] [pid 2479418:tid 124098969589440] [client 64.236.134.225:14272] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Mon Jun 22 20:02:47.082854 2026] [access_compat:error] [pid 2479418:tid 124096400578240] [client 64.236.134.225:14273] AH01797: client denied by server configuration: proxy:http://localhost:4000/ ... show less	Brute-Force SSH
🇯🇵 SentinalX by uzumaru	2026-06-23 01:00:41 (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: tracker.project-flight.com:443 show less	Open Proxy Port Scan
Anonymous	2026-06-09 15:31:02 (4 months ago)	Tarpit trap event · duration=12s · automated report from intelmatch-prod	Brute-Force SSH
Anonymous	2026-06-09 15:00:54 (4 months ago)	Tarpit trap event · duration=17s · automated report from intelmatch-prod	Brute-Force SSH
Anonymous	2026-06-09 14:15:58 (4 months ago)	Tarpit trap event · duration=23s · automated report from intelmatch-prod	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-03 10:23:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 64.236.134.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.134.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:23:33.080756 2026] [security2:error] [pid 20138:tid 20138] [client 64.236.134.225:55310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.180"] [uri "/wp-config.php"] [unique_id "aiAApUrNx9KF0P_yubCczQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-06-03 09:36:03 (4 months ago)	[09:36] Port scanning. Port(s) scanned: TCP/8080, TCP/2083, TCP/2082, TCP/8443	Port Scan
🇳🇱 BIV	2026-06-03 09:26:23 (4 months ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2082,2083,443,80,8 ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 2082,2083,443,80,8443. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-06-03 08:43:06 (4 months ago)	Shorewall log file match.	Port Scan
🇺🇸 RAP	2026-06-03 08:25:38 (4 months ago)	2026-06-03 08:25:38 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
Anonymous	2026-06-03 07:25:33 (4 months ago)	Port Scan	Port Scan
🇫🇮 kumiko	2026-06-01 02:46:05 (4 months ago)	[2026-06-01 05:46:05] Unauthorized port scan/probing (3 times on ports 2083, 2087, 8080) Blocked by ... show more [2026-06-01 05:46:05] Unauthorized port scan/probing (3 times on ports 2083, 2087, 8080) Blocked by UFW show less	Port Scan

Showing 1 to 15 of 235 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1006::1a

🇭🇰 218.255.103.194

🇫🇷 217.182.253.249

🇺🇸 159.223.143.24

🇵🇰 119.73.113.128

🇳🇵 118.91.173.210

🇲🇾 113.211.208.29

🇺🇦 91.250.11.183

🇺🇸 91.230.168.18

🇫🇷 85.217.140.40

🇵🇰 39.63.159.88

🇵🇰 160.30.142.208

🇺🇸 159.203.72.180

🇻🇳 116.111.185.233

🇵🇭 112.210.252.126

🇵🇰 111.92.157.224

🇻🇳 110.172.28.143

🇳🇱 83.229.83.169

🇺🇸 34.83.117.36

🇭🇰 185.227.152.135