JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.141.178

64.236.141.178 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 36%: ?

36%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.141.178

Whois 64.236.141.178

IP Abuse Reports for 64.236.141.178:

This IP address has been reported a total of 53 times from 32 distinct sources. 64.236.141.178 was first reported on July 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-07-19 11:12:49 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-06-30 12:09:55 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.binance.com:443 show less	Open Proxy Port Scan
🇧🇾 lns.bz	2026-06-14 17:42:56 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-14 16:52:49 (1 month ago)	64.236.141.178 - - [14/Jun/2026:19:52:42 +0300] "GET /.env HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Linux ... show more 64.236.141.178 - - [14/Jun/2026:19:52:42 +0300] "GET /.env HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 64.236.141.178 - - [14/Jun/2026:19:52:49 +0300] "GET /wp-config.php.bak HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-06-14 15:49:29 (1 month ago)	Honeypot hit: Empty payload (likely service probe); 2095 [1], 2096 [1], 2086 [1], 2082 [1], 2077 [1] ... show more Honeypot hit: Empty payload (likely service probe); 2095 [1], 2096 [1], 2086 [1], 2082 [1], 2077 [1], 2087 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Nightreaver	2026-06-14 13:13:19 (1 month ago)	64.236.141.178 - - [14/Jun/2026:15:13:15 0200] "GET /.env.production HTTP/1.1" 404 456 "-" "Mozilla ... show more 64.236.141.178 - - [14/Jun/2026:15:13:15 0200] "GET /.env.production HTTP/1.1" 404 456 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" 64.236.141.178 - - [14/Jun/2026:15:13:15 0200] "GET /.env.backup HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 64.236.141.178 - - [14/Jun/2026:15:13:16 0200] "GET /.env.save HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 64.236.141.178 - - [14/Jun/2026:15:13:18 0200] "GET /wp-config.php HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 64.236.141.178 - - [14/Jun/2026:15:13:18 0200] "GET /wp-config.php.bak HTTP/1.1" 404 456 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"[...] show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-14 12:43:15 (1 month ago)	tcp port scan (20 or more attempts)	Port Scan
🇺🇸 Axel	2026-06-14 12:33:11 (1 month ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 42532 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 42532 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 itsnixk	2026-06-14 12:28:44 (1 month ago)	(mod_security) mod_security (id:920350) triggered by 64.236.141.178 (US/United States/-): 1 in the l ... show more (mod_security) mod_security (id:920350) triggered by 64.236.141.178 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 08:28:41.579417 2026] [security2:error] [pid 331543:tid 331946] [client 64.236.141.178:42018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.env.production"] [unique_id "ai6eecwcYeo_fCt8gzgQ4wAAAIc"] show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-06-02 20:38:02 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 MPL	2026-06-02 18:24:30 (1 month ago)	tcp port scan (6 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-06-02 18:15:59 (1 month ago)	2026-06-02T21:15:58.406061+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-02T21:15:58.406061+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=64.236.141.178 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=14224 DF PROTO=TCP SPT=60432 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 David Ferneding	2026-06-02 17:44:42 (1 month ago)	Blocked by UFW (TCP on 2087) Source port: 60432 TTL: 54 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 60432 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 64.236.141.178) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇱 spd.co.il	2026-05-26 01:06:55 (1 month ago)	Web application attack detected	Hacking Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.50

🇳🇱 176.65.148.2

🇺🇸 136.107.81.240

🇨🇳 101.126.17.72

🇳🇱 31.14.32.8

🇫🇷 213.136.83.63

🇨🇳 211.103.117.160

🇵🇰 202.59.12.213

🇺🇸 172.253.9.217

🇨🇳 117.31.84.139

🇺🇸 103.102.246.101

🇺🇸 64.62.156.222

🇬🇧 35.203.211.18

🇺🇸 20.65.193.94

🇺🇸 12.156.67.18

🇭🇰 199.45.154.128

🇷🇴 193.32.162.83

🇺🇸 162.216.150.164

🇭🇰 156.225.1.44

🇦🇷 131.108.141.166