JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.142.224

64.236.142.224 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.142.224

Whois 64.236.142.224

IP Abuse Reports for 64.236.142.224:

This IP address has been reported a total of 57 times from 48 distinct sources. 64.236.142.224 was first reported on September 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-05 12:24:49 (1 week ago)	tcp port scan (16 or more attempts)	Port Scan
🇬🇧 djboddington	2026-06-05 12:22:40 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 Savvii	2026-06-05 11:51:43 (1 week ago)	15 attempts against mh-modsecurity-ban on orcus	Brute-Force Web App Attack
🇦🇺 Telemetry2U.com	2026-06-05 11:06:11 (1 week ago)	Unauthorized connection attempt to port 8080	Hacking
🇦🇺 dyln	2026-06-05 11:02:27 (1 week ago)	Dyls honeypot brute-force: proto8 (16 total hits)	Brute-Force
🇺🇸 xmission.com	2026-06-05 09:26:39 (1 week ago)	Blocked by UFW (TCP on 8443) Source port: 20521 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8443) Source port: 20521 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 64.236.142.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 07:57:43 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 64.236.142.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.142.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 03:57:38.567824 2026] [security2:error] [pid 27092:tid 27092] [client 64.236.142.224:21392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.157"] [uri "/.git/HEAD"] [unique_id "aiKBcomhycIop9Jyt2e5ogAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-01 03:50:08 (2 weeks ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇬🇧 sonot	2026-05-31 18:45:06 (2 weeks ago)	Blocked by UFW on tunneluk01 [9200/tcp] Source port: 52224 TTL: 233 Packet length: 40 TOS: 0x00 Thi ... show more Blocked by UFW on tunneluk01 [9200/tcp] Source port: 52224 TTL: 233 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-05-31 11:52:57 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇬🇧 PeravixGroup	2026-05-31 00:04:00 (2 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇯🇵 demonsword	2026-05-10 16:47:45 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇳🇱 Cloud86 B.V.	2026-04-08 01:13:01 (2 months ago)	categories: Email Spam	Email Spam
🇳🇱 soverin	2026-04-08 01:01:02 (2 months ago)	spam	Email Spam
🇬🇧 2048	2026-03-28 03:40:51 (2 months ago)	2026-03-28T04:40:48.110956+01:00 machodeer kernel: [2926067.585615] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-28T04:40:48.110956+01:00 machodeer kernel: [2926067.585615] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.142.224 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=12819 DF PROTO=TCP SPT=19526 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-28T04:40:49.159100+01:00 machodeer kernel: [2926068.635376] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.142.224 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=12820 DF PROTO=TCP SPT=19526 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-28T04:40:50.184781+01:00 machodeer kernel: [2926069.659484] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.142.224 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=12821 DF PROTO=TCP SPT=19526 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇯🇵 172.253.198.209

🇺🇸 143.42.0.20

🇬🇧 82.20.97.160

🇳🇱 77.83.39.185

🇩🇪 69.5.169.87

🇺🇸 64.62.156.15

🇧🇩 45.120.115.150

🇺🇸 195.184.76.214

🇨🇳 120.52.12.202

🇵🇰 119.156.28.157

🇮🇳 103.116.137.166

🇺🇸 91.193.232.80

🇫🇮 89.167.70.88

🇸🇬 47.128.123.242

🇭🇰 47.76.100.148

🇺🇸 45.79.104.47

🇺🇸 45.33.89.53

🇸🇳 41.208.147.131

🇺🇸 34.168.176.181