64.236.140.199
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
18 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Admins@Storch |
IPS:drop <match> dstport=1085
|
Brute-Force Exploited Host | |
| 🇩🇪 EinfxchFinn |
Unauthorized connection attempt to port 8002 from 64.236.140.199
|
Port Scan | |
| 🇦🇺 PetePK |
Probed 2 time(s): TCP/8882
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [8003/tcp]
Source port: 22568
TTL: 229
Packet length: 40
|
Port Scan | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [8087/tcp] | SPT: 22568 | TTL: 110 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇺🇸 SANYALnet Labs |
|
Brute-Force | |
| 🇫🇷 Octopuce |
Aggressive web search of vulnerable pages: /bitrix/tools/track_mail_click.php?url=/ /bitrix/redirect.php?goto=/ /reports/rwservlet?report=test. ...
|
Web App Attack | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: x86.h2cloud.vn:443:443
|
Open Proxy Port Scan | |
| Anonymous |
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
|
DDoS Attack | |
| 🇩🇪 Ilop |
[hp-100] 8 unsolicited packets to honeypot ports 2087,443,8443,80,8080,2086 (OCI DShield sensor)
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-04 10:51:46 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇭🇰 mutebot.net |
SRC=64.236.140.199, PROTO=TCP, SPT=22593, DPT=8080
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown