64.236.140.199

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
18 reports
18 reporters · latest 3 weeks ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 2 🇦🇺 Australia 1
Most common categories Port Scan 6 Brute-Force 4 Exploited Host 1 Web App Attack 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Admins@Storch
IPS:drop <match> dstport=1085
Brute-Force Exploited Host
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 8002 from 64.236.140.199
Port Scan
🇦🇺 PetePK
Probed 2 time(s): TCP/8882
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [8003/tcp] Source port: 22568 TTL: 229 Packet length: 40
Port Scan
🇬🇧 Axel
Blocked by UFW on BGPGB [8087/tcp] | SPT: 22568 | TTL: 110 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇺🇸 SANYALnet Labs
Brute-Force
🇫🇷 Octopuce
Aggressive web search of vulnerable pages: /bitrix/tools/track_mail_click.php?url=/ /bitrix/redirect.php?goto=/ /reports/rwservlet?report=test. ...
Web App Attack
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: x86.h2cloud.vn:443:443
Open Proxy Port Scan
Anonymous
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇩🇪 Ilop
[hp-100] 8 unsolicited packets to honeypot ports 2087,443,8443,80,8080,2086 (OCI DShield sensor)
Port Scan
🇺🇸 RAP
2026-08-04 10:51:46 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇭🇰 mutebot.net
SRC=64.236.140.199, PROTO=TCP, SPT=22593, DPT=8080
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.85
🇮🇩 182.9.36.252
🇫🇮 147.185.133.147
🇰🇷 120.29.143.194
🇬🇧 118.26.104.93
🇺🇸 91.230.168.250
🇺🇸 91.230.168.137
🇺🇸 91.230.168.136
🇪🇸 89.47.239.196
🇮🇷 77.237.185.21
🇮🇳 43.230.213.9
🇨🇳 36.26.74.162
🇹🇼 35.194.253.191
🇵🇷 216.147.125.191
🇳🇱 204.76.203.38
🇧🇪 198.235.24.208
🇨🇱 186.189.97.52
🇸🇬 145.223.144.1
🇰🇷 121.129.7.154
🇹🇭 118.194.251.17
feedback