JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.135.10

64.236.135.10 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 78%: ?

78%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.135.10

Whois 64.236.135.10

IP Abuse Reports for 64.236.135.10:

This IP address has been reported a total of 17 times from 17 distinct sources. 64.236.135.10 was first reported on June 9th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 ptlab	2026-06-09 22:30:02 (1 week ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇫🇷 sthoyer.de	2026-06-09 21:39:42 (1 week ago)	Jun 9 23:39:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 9 23:39:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.135.10 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=53644 DF PROTO=TCP SPT=61143 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 9 23:39:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.135.10 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=1981 DF PROTO=TCP SPT=61135 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 9 23:39:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.135.10 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=4931 DF PROTO=TCP SPT=61158 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 9 23:39:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.135.10 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=24298 DF PROTO=TCP SPT=61149 DPT=8443 WINDOW=6 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-09 21:34:35 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 64.236.135.10 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.236.135.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:34:28.498538 2026] [security2:error] [pid 11401:tid 11401] [client 64.236.135.10:61074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.121"] [uri "/.git/HEAD"] [unique_id "aiiG5IYNfL7Ri8HmW_h5SAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-09 21:24:58 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 SysAdmin Dylan	2026-06-09 20:31:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 64.236.135.10 (US/United States/-): 10 in the l ... show more (mod_security) mod_security (id:210730) triggered by 64.236.135.10 (US/United States/-): 10 in the last 3600 secs show less	Brute-Force
Anonymous	2026-06-09 20:25:33 (1 week ago)	Port Scan	Port Scan
🇺🇸 zwebvigil	2026-06-09 19:22:00 (1 week ago)	64.236.135.10 [09/Jun/2026:12:21:53 -0700] "GET /.git/HEAD HTTP/1.1" 401 381 "-" port=60798 "Mozill ... show more 64.236.135.10 [09/Jun/2026:12:21:53 -0700] "GET /.git/HEAD HTTP/1.1" 401 381 "-" port=60798 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 510 64.236.135.10 [09/Jun/2026:12:21:54 -0700] "GET /.git/config HTTP/1.1" 401 381 "-" port=60757 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 331 64.236.135.10 [09/Jun/2026:12:21:55 -0700] "GET /.env HTTP/1.1" 401 381 "-" port=61673 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 218 64.236.135.10 [09/Jun/2026:12:21:55 -0700] "GET /.env.local HTTP/1.1" 401 381 "-" port=60750 "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "-" "-" "<ipaddr>" 254 64.236.135.10 [09/Jun/2026:12:21:5 show less	Web App Attack
🇧🇷 Halux	2026-06-09 19:19:23 (1 week ago)	64.236.135.10 Probing protected path or service	Web App Attack
🇹🇷 Threat.live	2026-06-09 19:10:03 (1 week ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 NXTwoThou	2026-06-09 18:03:56 (1 week ago)	/.git/HEAD	Web App Attack
🇺🇸 kosada.com	2026-06-09 17:31:15 (1 week ago)	Web vulnerability probing: /.env.production (bogus vhost/SNI)	Web App Attack
Anonymous	2026-06-09 16:40:03 (1 week ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇨🇿 Countryman	2026-06-09 16:30:55 (1 week ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇮🇹 Progetto1	2026-06-09 16:30:08 (1 week ago)	Multiple exploit attempts	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 GabrielJST	2026-06-09 16:26:12 (1 week ago)	Port Scan detected from 64.236.135.10 (US/United States/-).	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 140.233.190.89

🇸🇬 118.26.111.107

🇺🇸 66.132.172.36

🇮🇳 49.206.34.104

🇺🇸 44.0.34.139

🇰🇷 211.241.111.57

🇭🇰 199.45.154.185

🇺🇸 147.185.132.53

🇮🇳 122.165.91.5

🇺🇸 44.102.50.253

🇨🇮 154.0.30.137

🇸🇬 107.150.112.233

🇭🇰 101.36.124.127

🇺🇸 44.64.109.37

🇭🇰 42.200.78.166

🇻🇳 14.225.23.94

🇮🇶 185.56.194.122

🇬🇧 68.183.43.38

🇯🇵 58.98.197.137

🇺🇸 44.163.234.122