JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.153.145

64.236.153.145 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.153.145

Whois 64.236.153.145

IP Abuse Reports for 64.236.153.145:

This IP address has been reported a total of 52 times from 39 distinct sources. 64.236.153.145 was first reported on October 4th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kkeyser	2026-06-08 06:56:29 (3 hours ago)	GET /.env HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 05:29:41 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:29:33.717149 2026] [security2:error] [pid 11194:tid 11194] [client 64.236.153.145:20034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.git/HEAD"] [unique_id "aiZTPWYuU8pjjQpeCHg-xwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 NordhTech	2026-06-08 05:15:05 (5 hours ago)	More than 3 malicious connection attempts, trying port(s) 2087/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-08 05:14:02 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:13:55.222126 2026] [security2:error] [pid 12940:tid 12940] [client 64.236.153.145:20065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.35"] [uri "/.git/HEAD"] [unique_id "aiZPk-1uR3W4GnctPCxhZAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-08 03:38:30 (6 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇷 SOC PR	2026-06-08 03:15:52 (7 hours ago)	IPS: WordPress Enforcement Protection.	Web App Attack
🇩🇪 AetherFox	2026-06-08 03:14:12 (7 hours ago)	AetherFox VoidGuard detected: [Mon Jun 08 03:14:08.779879 2026] [authz_core:error] [pid 3754911:tid ... show more AetherFox VoidGuard detected: [Mon Jun 08 03:14:08.779879 2026] [authz_core:error] [pid 3754911:tid 3754959] [client 64.236.153.145:20432] AH01630: client denied by server configuration: proxy:https://freebeegee.draconigen.de/.git/HEAD [Mon Jun 08 03:14:08.780066 2026] [authz_core:error] [pid 3754911:tid 3754959] [client 64.236.153.145:20432] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Mon Jun 08 03:14:09.745073 2026] [authz_core:error] [pid 3754911:tid 3754962] [client 64.236.153.145:20418] AH01630: client denied by server configuration: proxy:https://freebeegee.draconigen.de/.git/config [Mon Jun 08 03:14:09.745189 2026] [authz_core:error] [pid 3754911:tid 3754962] [client 64.236.153.145:20418] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Mon Jun 08 03:14:11.510361 2026] [authz_core:error] [pid 3754910:tid 3754935] [client 64.236.153.145:20141] AH01630: client denied by server configuratio ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-08 02:57:35 (7 hours ago)	Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 443/tcp (HTTPS), 8080/tcp ... show more Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 443/tcp (HTTPS), 8080/tcp (HTTP-alt), 8443/tcp (HTTPS-alt)) show less	Port Scan
🇬🇧 pearbright	2026-06-08 02:50:38 (7 hours ago)	2026-06-08T02:50:16.866151+00:00 srv740043 kernel: [1624605.758964] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ... show more 2026-06-08T02:50:16.866151+00:00 srv740043 kernel: [1624605.758964] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=64.236.153.145 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x20 TTL=37 ID=972 DF PROTO=TCP SPT=19802 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-08T02:50:16.866335+00:00 srv740043 kernel: [1624605.760265] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=64.236.153.145 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x20 TTL=37 ID=17273 DF PROTO=TCP SPT=19803 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-08T02:50:16.866355+00:00 srv740043 kernel: [1624605.760642] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=64.236.153.145 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x20 TTL=37 ID=51082 DF PROTO=TCP SPT=19799 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-08T02:50:16.866372+00:00 srv740043 kernel: [1624605.761140] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=64.236. ... show less	Port Scan
🇩🇪 Tamsy	2026-06-08 02:43:03 (7 hours ago)	HTTPD - Web Application scripting attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 02:39:06 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.153.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:39:00.811474 2026] [security2:error] [pid 8153:tid 8153] [client 64.236.153.145:19815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.158"] [uri "/.git/HEAD"] [unique_id "aiYrRDHd4DBmKpNEM0JH2QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-08 02:05:19 (8 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇴 adalbertoreyes.org	2026-06-03 18:49:50 (4 days ago)	CategoryPortScan	Port Scan
Anonymous	2026-06-03 08:00:00 (5 days ago)	SSH Brute-Force	DDoS Attack Port Scan Hacking Brute-Force SSH
🇮🇪 AutosOnShow	2026-06-03 07:51:05 (5 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-03 07:50:49.012 \|	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::5f

🇬🇧 193.163.125.128

🇷🇺 109.195.179.94

🇨🇦 85.217.149.60

🇷🇴 80.94.95.116

🇷🇴 80.94.92.165

🇪🇬 62.68.238.212

🇨🇳 60.16.220.23

🇺🇸 34.162.109.145

🇺🇸 34.75.11.252

🇳🇱 2001:67c:e60:c0c:192:42:116:117

🇨🇳 202.46.62.31

🇸🇬 178.128.84.112

🇮🇳 122.165.18.103

🇲🇹 78.133.34.54

🇨🇦 72.136.111.137

🇺🇸 71.6.237.93

🇺🇸 67.207.95.230

🇺🇸 66.116.237.163

🇺🇸 34.169.75.16