JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.142.136

64.236.142.136 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 70%: ?

70%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.142.136

Whois 64.236.142.136

IP Abuse Reports for 64.236.142.136:

This IP address has been reported a total of 29 times from 24 distinct sources. 64.236.142.136 was first reported on February 4th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 06:00:37 (1 week ago)	[03/Jun/2026:06:00:31.073741 +0000] ah_C_-MD9w1sDzoIx_-OmAAAAAk 64.236.142.136 8322 [redacted] 80 [0 ... show more [03/Jun/2026:06:00:31.073741 +0000] ah_C_-MD9w1sDzoIx_-OmAAAAAk 64.236.142.136 8322 [redacted] 80 [03/Jun/2026:06:00:37.040396 +0000] ah_DBUnhw24_u8InHtO95wAAAAA 64.236.142.136 8327 [redacted] 80 show less	Hacking Web App Attack
🇺🇸 ISPLtd	2026-06-03 05:55:25 (1 week ago)	Jun 2 23:55:24 64.236.142.136 TCP SPT=8257 DPT=8443 SYN Jun 2 23:55:24 64.236.142.136 TCP SPT=8260 ... show more Jun 2 23:55:24 64.236.142.136 TCP SPT=8257 DPT=8443 SYN Jun 2 23:55:24 64.236.142.136 TCP SPT=8260 DPT=8080 SYN Jun 2 23:55:24 64.236.142.136 TCP SPT=8257 DPT=2086 ... show less	Port Scan
🇧🇷 SOC PR	2026-06-03 05:40:40 (1 week ago)	IPS: Sensitive Configuration File Disclosure.	Hacking
🇺🇸 MPL	2026-06-03 05:30:19 (1 week ago)	tcp ports: 2082,2087 (2 or more attempts)	Port Scan
Anonymous	2026-06-03 02:03:46 (1 week ago)	PORT & IP Scan.	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-06-02 07:27:08 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 03:27:03.133714 2026] [security2:error] [pid 25088:tid 25088] [client 64.236.142.136:3469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.187"] [uri "/.git/HEAD"] [unique_id "ah6Fx4XrQJyNFCNux-lEZAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 07:00:00 (2 weeks ago)	SSH Brute-Force	DDoS Attack Port Scan Hacking Brute-Force SSH
🇩🇪 check-the-sum.fr	2026-06-02 05:37:38 (2 weeks ago)	Port Scanning	Port Scan
Anonymous	2026-06-02 05:30:01 (2 weeks ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-06-02 05:17:15 (2 weeks ago)	64.236.142.136 detected on srv01	Port Scan
🇹🇷 Threat.live	2026-06-02 05:15:07 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 MPL	2026-06-02 04:59:05 (2 weeks ago)	tcp port scan (8 or more attempts)	Port Scan
🇳🇱 tpjg	2026-06-02 04:23:18 (2 weeks ago)	Automated: 15 requests with error status in 120s window from 64.236.142.136. Evidence: /___proxy_sub ... show more Automated: 15 requests with error status in 120s window from 64.236.142.136. Evidence: /___proxy_subdomain_whm/login/:301,/___proxy_subdomain_whm/login/:301,/dump.sql:301,/backup.sql:301,/.DS_Store:301,/actuator/env:301,/server-status:301,/phpinfo.php:301,/.aws/credentials:301,/wp-config.php.bak:301,/wp-config.php:301,/.env.production:301,/.env.local:301,/.git/config:301,/.git/HEAD:301 show less	Web App Attack
Anonymous	2026-06-02 03:39:46 (2 weeks ago)	(caddyscan) Scanner path probe from 64.236.142.136 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 64.236.142.136 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.128.134.2 200 2627 64.236.142.136 - - [02/Jun/2026:03:39:14 +0000] "GET /.env.backup HTTP/1.1" 216.128.134.2 200 2627 64.236.142.136 - - [02/Jun/2026:03:39:16 +0000] "GET /.env.save HTTP/1.1" 216.128.134.2 200 2627 64.236.142.136 - - [02/Jun/2026:03:39:18 +0000] "GET /wp-config.php HTTP/1.1" 216.128.134.2 200 2627 64.236.142.136 - - [02/Jun/2026:03:39:23 +0000] "GET /.aws/credentials HTTP/1.1" 216.128.134.2 200 2627 64.236.142.136 - - [02/Jun/2026:03:39:40 +0000] "GET /server-status HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 03:37:58 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 23:37:52.464867 2026] [security2:error] [pid 1001:tid 1001] [client 64.236.142.136:3173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.67"] [uri "/.git/HEAD"] [unique_id "ah5QEPB6-vxuZO5obr1edAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.35.25.179

🇩🇿 154.242.65.68

🇭🇰 150.5.131.119

🇮🇳 122.185.237.142

🇮🇪 54.216.80.181

🇫🇮 185.94.32.25

🇨🇳 183.143.49.237

🇯🇵 163.44.101.215

🇳🇱 107.189.24.77

🇩🇪 91.107.156.50

🇳🇱 91.92.40.97

🇵🇰 72.255.36.61

🇧🇷 45.161.148.87

🇫🇮 204.168.240.142

🇮🇹 192.71.26.53

🇮🇷 5.144.129.118

🇷🇴 2a06:1700:0:3c::1

🇩🇪 212.19.235.19

🇲🇽 201.127.116.131

🇳🇱 185.242.226.80