64.236.161.20
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
No reports in the last 60 days
64.236.161.20 has been reported 147 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
147 from
74 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 neron |
CrowdSec blocked: tcp:scan detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: tcp:scan detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇨🇱 CTMAN dev |
|
Bad Web Bot | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇪🇪 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.env | seen at 2026-07-01 08:53:26.377 |
|
Web App Attack | |
| Anonymous |
Port Scan
|
Port Scan | |
| 🇧🇷 somosbr |
[2026-06-13T15:53:58Z] Unsolicited scan from 64.236.161.20 to port 443/tcp
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on MVI [8880/tcp] | SPT: 6080 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 kkeyser |
GET /.env HTTP/1.1
|
Web App Attack | |
| Anonymous |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| Anonymous |
Port Scan
|
Port Scan | |
| 🇹🇷 Threat.live |
Suspicious Connection Attempts
|
Brute-Force | |
| Anonymous |
|
Port Scan Brute-Force | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /wp-config.php HTTP/1.1, GET /config/database.yml HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /.env.backup HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /.env.save HTTP/1.1
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown