JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.142.129

64.236.142.129 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 36%: ?

36%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.142.129

Whois 64.236.142.129

IP Abuse Reports for 64.236.142.129:

This IP address has been reported a total of 34 times from 24 distinct sources. 64.236.142.129 was first reported on September 27th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-26 01:10:46 (16 hours ago)	Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 80/tcp (HTTP))	Port Scan
🇯🇵 demonsword	2026-07-12 08:23:29 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇹🇷 SeczarSecureOps	2026-06-13 16:09:41 (1 month ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (22 events in 10min) at 2026-06-13 16:09	Port Scan
🇱🇹 NotACaptcha	2026-06-13 15:34:19 (1 month ago)	Unauthorised access (Jun 13 18:34) SRC=64.236.142.129 LEN=60 TTL=39 ID=34509 DF TCP DPT=8080 WINDOW= ... show more Unauthorised access (Jun 13 18:34) SRC=64.236.142.129 LEN=60 TTL=39 ID=34509 DF TCP DPT=8080 WINDOW=64240 SYN show less	Port Scan
🇺🇸 RAP	2026-06-13 14:45:48 (1 month ago)	2026-06-13 14:45:48 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 wteiken	2026-06-13 13:22:10 (1 month ago)	2026-06-13T09:22:09.282097-04:00 nostromo.teiken.net kernel: [309374.797061] syn_limit:IN=en-wan OUT ... show more 2026-06-13T09:22:09.282097-04:00 nostromo.teiken.net kernel: [309374.797061] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.142.129 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=53591 DF PROTO=TCP SPT=63496 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-13T09:22:09.282452-04:00 nostromo.teiken.net kernel: [309374.797149] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.142.129 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=61934 DF PROTO=TCP SPT=63497 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-13T09:22:09.282559-04:00 nostromo.teiken.net kernel: [309374.797168] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=64.236.142.129 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=45607 DF PROTO=TCP SPT=63496 DPT=10000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-13T09:22:09.282662-04:00 nostromo.teiken.net kernel: [309374.797186] syn_limit:IN=en-wan OUT= MAC=00:50:43:37 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-13 12:42:31 (1 month ago)	Blocked by UFW (TCP on 2078) Source port: 63496 TTL: 113 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2078) Source port: 63496 TTL: 113 Packet length: 40 TOS: 0x00 This report (for 64.236.142.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sumnone	2026-06-13 12:31:24 (1 month ago)	Port probing on unauthorized port 8880	Port Scan Hacking Exploited Host
🇺🇸 Axel	2026-06-13 12:14:39 (1 month ago)	Blocked by UFW on MVI [8880/tcp] \| SPT: 63496 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [8880/tcp] \| SPT: 63496 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-13 10:27:33 (1 month ago)	Blocked by UFW (TCP on 8880) Source port: 63496 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8880) Source port: 63496 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 64.236.142.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-06-03 02:52:10 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 01:16:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.129 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 21:16:10.821276 2026] [security2:error] [pid 8048:tid 8048] [client 64.236.142.129:44298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/.git/config"] [unique_id "ah-AWsss-pMpZEr_iZV8mAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 01:08:30 (1 month ago)	64.236.142.129 detected on srv01	Port Scan
🇩🇪 manuelisus	2026-06-03 01:02:19 (1 month ago)	Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +25: trap_robots_disallow_ser ... show more Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +25: trap_robots_disallow_server-status, +40: repeat_visitor_5plus show less	Web App Attack Hacking

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇳 202.72.245.146

🇦🇷 179.37.123.73

🇺🇸 162.216.150.244

🇺🇸 162.216.150.197

🇩🇪 62.244.39.243

🇵🇱 45.128.38.245

🇰🇷 14.39.118.205

🇳🇱 193.25.217.70

🇩🇪 185.242.3.189

🇧🇷 177.73.244.202

🇺🇸 172.236.228.115

🇺🇸 170.187.165.130

🇺🇸 170.187.163.133

🇻🇳 165.154.187.159

🇺🇸 162.216.150.77

🇧🇩 157.119.50.72

🇺🇸 135.237.127.161

🇨🇳 106.75.25.139

🇺🇸 92.204.138.58

🇳🇱 91.92.42.52