JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.236.143.216

64.236.143.216 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 32%: ?

32%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.236.143.216

Whois 64.236.143.216

IP Abuse Reports for 64.236.143.216:

This IP address has been reported a total of 54 times from 37 distinct sources. 64.236.143.216 was first reported on December 15th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-01 15:25:32 (2 weeks ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇪🇸 bohl-aiG5aef	2026-08-26 21:39:16 (3 weeks ago)	Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound	Hacking
🇺🇸 TPI-Abuse	2026-08-26 21:37:28 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.143.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.143.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:37:20.884262 2026] [security2:error] [pid 8500:tid 8500] [client 64.236.143.216:54342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.190"] [uri "/.git/HEAD"] [unique_id "ao9ckDNNtO-ta13Ff_VQoAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 21:06:43 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.236.143.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 64.236.143.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:06:35.746590 2026] [security2:error] [pid 3967:tid 3967] [client 64.236.143.216:54405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/.git/config"] [unique_id "ao9VW0tl780rlVDneuqIfgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 seal	2026-08-26 20:51:02 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	SSH Brute-Force
🇺🇸 xmission.com	2026-08-26 20:12:38 (3 weeks ago)	Blocked by UFW (TCP on 8443) Source port: 54339 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8443) Source port: 54339 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 64.236.143.216) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-26 16:53:43 (3 weeks ago)	tcp port scan (10 or more attempts)	Port Scan
Anonymous	2026-08-26 16:49:59 (3 weeks ago)	Unauthorized access (8080/tcp/http-alt)	Port Scan
🇺🇸 Axel	2026-06-16 16:29:56 (3 months ago)	Blocked by UFW on MVI [2087/tcp] \| SPT: 25602 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2087/tcp] \| SPT: 25602 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-06-16 13:18:05 (3 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇪🇪 Selckie	2026-06-15 15:46:39 (3 months ago)	fail2ban: NGINX unusual impact	Web App Attack
🇯🇵 demonsword	2026-06-03 16:54:59 (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇳🇱 JCB	2026-06-03 13:08:00 (3 months ago)	64.236.143.216 - - [03/Jun/2026:02:52:52 +0300] "GET /phpinfo.php HTTP/1.1" 404 236 64.236.143.216 ... show more 64.236.143.216 - - [03/Jun/2026:02:52:52 +0300] "GET /phpinfo.php HTTP/1.1" 404 236 64.236.143.216 - - [03/Jun/2026:02:52:54 +0300] "GET /server-status HTTP/1.1" 404 236 ... show less	Web App Attack
🇹🇼 kk_it_man	2026-06-03 03:40:13 (3 months ago)		Port Scan
🇬🇧 PeravixGroup	2026-06-03 03:03:12 (3 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.118

🇺🇸 34.63.42.56

🇷🇴 205.188.160.7

🇪🇹 196.188.226.128

🇬🇧 157.245.34.56

🇧🇩 119.148.49.82

🇮🇳 103.132.243.250

🇮🇩 103.93.160.210

🇮🇳 98.70.127.17

🇩🇪 89.1.215.131

🇵🇱 87.251.64.133

🇩🇪 64.89.163.178

🇺🇸 50.84.211.204

🇨🇳 39.101.92.39

🇮🇹 34.17.139.254

🇮🇳 20.40.44.6

🇺🇸 217.177.128.229

🇩🇪 213.209.159.25

🇮🇳 210.212.136.3

🇺🇸 204.210.212.102