JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.142.147

64.236.142.147 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 76%: ?

76%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.142.147

Whois 64.236.142.147

IP Abuse Reports for 64.236.142.147:

This IP address has been reported a total of 59 times from 34 distinct sources. 64.236.142.147 was first reported on August 3rd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-06-19 22:13:11 (4 days ago)	Unauthorized web scan.	Web App Attack
🇺🇸 Axel	2026-06-14 10:57:32 (1 week ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 39957 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 39957 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Ribeye375	2026-06-14 06:00:23 (1 week ago)	HIPS web-exfiltration - Block tcp/0:65535	Web App Attack
🇩🇪 larse99	2026-06-08 21:00:37 (2 weeks ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 22:26:28 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 18:26:21.905232 2026] [security2:error] [pid 3250:tid 3250] [client 64.236.142.147:11868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.78"] [uri "/.git/HEAD"] [unique_id "ah9YjdVlZ_ah70yhVNS6-AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-02 21:49:10 (3 weeks ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-06-02 21:36:30 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-02 21:30:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:29:56.682681 2026] [security2:error] [pid 15328:tid 15330] [client 64.236.142.147:11857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.17"] [uri "/.git/HEAD"] [unique_id "ah9LVP4CjKzREAGvLKiZcQAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-02 21:14:44 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 RAP	2026-06-02 20:52:25 (3 weeks ago)	2026-06-02 20:52:25 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇮🇹 madaello	2026-06-02 20:46:50 (3 weeks ago)	64.236.142.147 - - [02/Jun/2026:22:46:45 +0200] "GET /.git/config HTTP/1.1" 301 608 "-" "Mozilla/5.0 ... show more 64.236.142.147 - - [02/Jun/2026:22:46:45 +0200] "GET /.git/config HTTP/1.1" 301 608 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 64.236.142.147 - - [02/Jun/2026:22:46:46 +0200] "GET /.env HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 64.236.142.147 - - [02/Jun/2026:22:46:48 +0200] "GET /.env.production HTTP/1.1" 301 616 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 64.236.142.147 - - [02/Jun/2026:22:46:49 +0200] "GET /.env.backup HTTP/1.1" 301 608 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Hacking
🇮🇪 AutosOnShow	2026-06-02 20:36:05 (3 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-02 20:35:08.792 \|	Web App Attack
Anonymous	2026-06-02 20:04:12 (3 weeks ago)	fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env. ... show more fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env.backup"] show less	Bad Web Bot Web App Attack
🇩🇪 IloGus	2026-06-02 20:00:15 (3 weeks ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 144.24.19.233

🇨🇳 112.47.128.74

🇺🇸 91.230.168.210

🇺🇸 91.230.168.89

🇺🇸 20.163.20.206

🇦🇲 5.77.133.154

🇩🇪 194.88.98.85

🇧🇴 186.121.201.67

🇸🇬 143.198.84.188

🇺🇸 107.172.250.235

🇫🇷 91.231.89.213

🇺🇸 66.63.169.59

🇧🇪 34.140.195.86

🇭🇰 20.24.213.19

🇧🇷 191.232.50.190

🇱🇰 124.43.67.254

🇨🇳 120.48.32.130

🇨🇳 113.128.88.214

🇻🇳 27.72.45.221

🇺🇸 20.65.193.129