JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.143.213

64.236.143.213 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.143.213

Whois 64.236.143.213

IP Abuse Reports for 64.236.143.213:

This IP address has been reported a total of 16 times from 16 distinct sources. 64.236.143.213 was first reported on October 30th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 StatsMe	2026-06-10 21:45:07 (2 days ago)	2026-06-10T01:12:35.671068+0300 ET SCAN NMAP -sS window 1024	Port Scan
Anonymous	2026-06-09 22:45:38 (3 days ago)	Honeypot hit: HTTP/1.1 request on 7848 GET /nacos/v1/cs/configs?dataId=&group=&tenant=&search=accur ... show more Honeypot hit: HTTP/1.1 request on 7848 GET /nacos/v1/cs/configs?dataId=&group=&tenant=&search=accurate&pageNo=1&pageSize=1 User-Agent: Go-http-client/1.1 Accept: application/json; 7848 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-06-09 22:24:09 (3 days ago)	tcp ports: 9849,8848 (2 or more attempts)	Port Scan
🇩🇪 zupan	2026-06-09 21:51:07 (3 days ago)	Blocked by UFW on vps [8848/tcp] \| SPT: 12288 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [8848/tcp] \| SPT: 12288 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-06-07 14:25:22 (5 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=64.236.143.213; proto=TCP; source_port=30656; target_port=8848; flags=ACK,RST show less	Port Scan
🇹🇷 SeczarSecureOps	2026-06-03 08:12:28 (1 week ago)	Seczar SecureOps — Port Scan Detection (6 events) — quarantined 43200m on fgdcapi	Port Scan
Anonymous	2026-06-03 07:30:30 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 psauxit	2026-06-03 06:40:00 (1 week ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇩🇪 MBombeck	2026-06-03 06:37:08 (1 week ago)	Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures	Web App Attack
🇺🇸 Rayulcifer	2026-03-20 20:27:13 (2 months ago)	64.236.143.213 - - [20/Mar/2026:15:27:12 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" ... show more 64.236.143.213 - - [20/Mar/2026:15:27:12 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-" 64.236.143.213 - - [20/Mar/2026:15:27:12 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 2048	2026-03-19 17:50:31 (2 months ago)	2026-03-19T18:50:27.921332+01:00 machodeer kernel: [2199446.860408] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-19T18:50:27.921332+01:00 machodeer kernel: [2199446.860408] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.143.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=57811 DF PROTO=TCP SPT=7232 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-19T18:50:28.961693+01:00 machodeer kernel: [2199447.900778] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.143.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=57812 DF PROTO=TCP SPT=7232 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-19T18:50:29.985917+01:00 machodeer kernel: [2199448.924799] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=64.236.143.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=57813 DF PROTO=TCP SPT=7232 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇮🇩 sockominfo	2026-01-26 15:00:03 (4 months ago)	Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 ( ... show more Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 40%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 yangfan	2026-01-17 22:34:50 (4 months ago)	UFW Blocked [23/TCP] Source: 64.236.143.213:5058 TTL: 105 Lenth: 40 TOS: 0x00	Port Scan Hacking Brute-Force
Anonymous	2026-01-17 19:08:05 (4 months ago)	Unauthorized connection to Telnet port 23	Port Scan
Anonymous	2025-12-06 06:32:05 (6 months ago)	Portscan: TCP/22 (39x)	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.160.68.87

🇩🇪 194.9.6.40

🇳🇱 192.253.248.23

🇺🇸 192.169.213.186

🇺🇸 180.178.57.170

🇨🇳 180.76.137.24

🇺🇸 172.236.228.111

🇯🇵 168.110.61.246

🇺🇸 162.216.150.234

🇨🇳 120.48.148.35

🇰🇷 119.207.112.28

🇨🇳 118.196.34.237

🇭🇰 118.26.153.102

🇮🇳 117.236.191.233

🇵🇭 112.208.79.118

🇺🇸 108.167.177.224

🇺🇸 104.152.52.56

🇺🇸 103.114.162.165

🇭🇰 103.14.33.174

🇿🇲 102.23.122.235