20.109.36.229
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
Abuse Reports
Total reports
23 from
21 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443
|
Open Proxy Port Scan | |
| Anonymous |
Aggressive web scan
|
Web App Attack | |
| 🇺🇸 sukka |
VLESS Client trying to do VPN Domain-Fronting with Cloudflare CDN via a WebSocket Tunnel
|
Hacking Web App Attack | |
| 🇳🇱 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| Anonymous |
Port Scan
|
Port Scan | |
| 🇫🇷 GabrielJST |
*Port Scan* detected from 20.109.36.229 (US/United States/-).
|
Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
Multiple web server 400 error codes from same source ip
|
Web App Attack | |
| 🇺🇸 schematics.cc |
Blocked by on honeypot2 [80/tcp] | SPT: 11861 | TTL: 114 | LEN: 40 | TOS: 0x00 • Reported by: abuse.terraforge.fun
|
Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇭🇰 mutebot.net |
SRC=20.109.36.229, PROTO=TCP, SPT=11458, DPT=8080
|
Port Scan | |
| 🇺🇸 MPL |
tcp port scan (20 or more attempts)
|
Port Scan | |
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — Port Scan Detection (9 events in 10min) at 2026-07-25 10:23
|
Port Scan | |
| 🇪🇸 alferez |
Searching .(env|sql|zip|tar|rar) files
|
Hacking Exploited Host Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 2078.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown