This IP address has been reported a total of
41
times from
35 distinct
sources.
64.236.161.18 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443
show less
Port Scan on Honeypot | Ports: 8080/HTTP-proxy, 80/HTTP | Proto: TCP(2) | Flags: all SYN | TTL: 40-4 ...
show morePort Scan on Honeypot | Ports: 8080/HTTP-proxy, 80/HTTP | Proto: TCP(2) | Flags: all SYN | TTL: 40-41 | Len: 60B(2x) | Win: 64240(2) | F2B/ufw-honeypot@2026-06-03T07:31:40Z
show less
Blocked by UFW on amperetwo [2087/tcp]
Source port: 25600
TTL: 54
Packet length: 60
TOS: 0x00
This ...
show moreBlocked by UFW on amperetwo [2087/tcp]
Source port: 25600
TTL: 54
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Access to sensitive files detected w/ specific boundary.. Threat Score: 7.1/10 (HIGH). Reported by T ...
show moreAccess to sensitive files detected w/ specific boundary.. Threat Score: 7.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show moreCloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
Port Scan
Showing 1 to
15
of 41 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩