JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.169.131

64.236.169.131 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 77%: ?

77%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.169.131

Whois 64.236.169.131

IP Abuse Reports for 64.236.169.131:

This IP address has been reported a total of 33 times from 27 distinct sources. 64.236.169.131 was first reported on July 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 GabrielJST	2026-06-03 03:05:23 (2 weeks ago)	Port Scan detected from 64.236.169.131 (US/United States/-).	Port Scan
🇩🇪 bescared	2026-06-03 02:56:47 (2 weeks ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
🇺🇸 RAP	2026-06-03 01:46:29 (2 weeks ago)	2026-06-03 01:46:29 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇷🇸 Scan	2026-06-03 01:10:14 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇹🇷 Threat.live	2026-06-03 00:05:12 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇦🇺 dyln	2026-06-03 00:03:25 (2 weeks ago)	Dyls honeypot brute-force: proto8 (18 total hits)	Brute-Force
🇹🇷 SeczarSecureOps	2026-06-02 23:28:31 (2 weeks ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (6 events in 10min) at 2026-06-02 23:28	Port Scan
🇫🇷 sthoyer.de	2026-06-02 23:06:15 (2 weeks ago)	Jun 3 01:06:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 3 01:06:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.169.131 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=27815 DF PROTO=TCP SPT=58305 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 3 01:06:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.169.131 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=13234 DF PROTO=TCP SPT=58305 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 3 01:06:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.169.131 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=33464 DF PROTO=TCP SPT=58305 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 3 01:06:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.236.169.131 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=51489 DF PROTO=TCP SPT=58304 DPT=2087 WI ... show less	Port Scan
🇦🇺 2000cn.com.au	2026-06-02 22:57:45 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇨🇭 Ribeye375	2026-06-02 22:54:32 (2 weeks ago)	HIPS recon-attempt - Block tcp/0:65535	Web App Attack
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 NXTwoThou	2026-06-02 22:39:22 (2 weeks ago)	/.git/HEAD	Web App Attack
🇬🇧 PeravixGroup	2026-06-02 22:19:19 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇫🇷 dynamix	2026-06-02 22:10:55 (2 weeks ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-06-02 21:43:46 (2 weeks ago)	64.236.169.131 (US/United States/-), 5 distributed cpanel attacks on account [root] in the last 3600 ... show more 64.236.169.131 (US/United States/-), 5 distributed cpanel attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-06-03 07:16:14 +1000] info [whostmgrd] 48.217.107.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-03 07:15:50 +1000] info [whostmgrd] 48.217.107.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-03 07:43:10 +1000] info [whostmgrd] 64.236.169.131 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-03 07:43:41 +1000] info [whostmgrd] 64.236.169.131 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-06-03 07:16:47 +1000] info [whostmgrd] 102.69.167.14 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: 48.217.107.117 (US/United States/-) show less	Port Scan

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 60.199.224.2

🇺🇸 18.217.208.51

🇧🇷 177.43.105.11

🇧🇷 170.78.244.6

🇭🇰 123.58.210.86

🇨🇳 118.145.238.115

🇰🇷 116.123.150.231

🇨🇳 110.80.136.142

🇮🇩 103.112.245.85

🇩🇪 85.158.108.118

🇫🇷 83.171.248.188

🇩🇪 68.183.70.177

🇺🇸 64.23.182.129

🇨🇳 14.103.102.130

🇺🇸 2604:a880:400:d1:0:4:9e7d:6001

🇰🇷 211.105.129.57

🇹🇼 211.22.131.70

🇧🇷 45.235.110.14

🇸🇨 45.194.67.130

🇲🇻 43.231.28.148