64.236.140.178

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
1% Caution
31 reports
22 reporters · latest 3 weeks ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇯🇵 Japan 1
Most common categories Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Bad Web Bot Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 9101) Source port: 44048 TTL: 113 Packet length: 40 TOS: 0x00 This report (for 64.236.140.178) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
Anonymous
denied traffic to a non-approved destination port. destination port 2086.
Port Scan
🇫🇷 SUNDAY Technologies
... Jul 9 03:06:22 drop SRC=64.236.140.178 LEN=60 PROTO=TCP DPT=8080 ACK=0 WINDOW=64240 SYN URGP=0 MARK=0x0
Port Scan
🇺🇸 RAP
2026-06-27 17:05:57 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
Anonymous
RdpGuard detected brute-force attempt on HTTP
Brute-Force
Anonymous
Unauthorized access (8080/tcp/http-alt)
Port Scan
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇳🇱 BellFix
Fail2ban reported 64.236.140.178 for npm-docker
Web App Attack
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443
Open Proxy Port Scan
Anonymous
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.188.222.252
🇳🇱 109.160.32.174
🇬🇧 87.236.176.29
🇺🇸 74.249.194.1
🇲🇲 45.112.45.196
🇺🇸 206.189.170.101
🇧🇪 198.235.24.215
🇵🇭 180.191.238.46
🇿🇦 165.165.114.103
🇺🇸 161.35.188.32
🇨🇳 125.34.44.129
🇨🇳 113.206.130.37
🇵🇰 110.38.240.114
🇩🇪 109.160.32.44
🇨🇳 101.96.230.56
🇺🇸 98.234.40.36
🇫🇷 91.196.152.171
🇺🇸 73.183.115.109
🇺🇸 66.218.236.8
🇺🇸 65.49.20.98
feedback