JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.61.3.36

Activity Trending Down

Abuse confidence score ?

38% Elevated

7 reports

7 reporters · latest 2 weeks ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.61.3.36

Export CSV

This IP address has been reported a total of 7 times from 7 distinct sources. 20.61.3.36 was first reported on September 19th 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Switzerland with 1 report; Germany with 1 report; Finland with 1 report. The only category in these recent reports was: Port Scan 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-09-20 07:04:56 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 9119 [2] TCP	Port Scan
🇮🇪 RoboSOC	2026-09-20 05:21:58 (2 weeks ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇫🇮 6kilowatti	2026-09-20 03:36:45 (2 weeks ago)	2026-09-20T06:36:44.226534+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-09-20T06:36:44.226534+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=20.61.3.36 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=60595 DF PROTO=TCP SPT=52974 DPT=9119 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-20 02:33:30 (2 weeks ago)	Blocked by firewall on hugin [9119/tcp] \| Rule: UFW \| SPT: 44196 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [9119/tcp] \| Rule: UFW \| SPT: 44196 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-20 01:27:07 (2 weeks ago)	Drop from IP address 20.61.3.36 to tcp-port 9119	Port Scan
🇺🇸 xmission.com	2026-09-19 23:50:13 (2 weeks ago)	Blocked by UFW (TCP on 9119) Source port: 60848 TTL: 50 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9119) Source port: 60848 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 20.61.3.36) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-19 23:40:55 (2 weeks ago)	[RoutePulse \| 2026-09-19T23:40:55Z] ATTACK: Port Scan Horizontal (port 9119) TARGET: 1 subnets: 185. ... show more [RoutePulse \| 2026-09-19T23:40:55Z] ATTACK: Port Scan Horizontal (port 9119) TARGET: 1 subnets: 185.54.80.0/24 SOURCE: 20.61.3.36 · AS8075 Microsoft Corporation · The Netherlands EVIDENCE: severity=warning · 256 flows · 15 KB · 256 distinct targets · port 9119 INTEL: RoutePulse score 0/100 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.30.68.132

🇰🇪 102.210.43.243

🇺🇸 100.29.192.113

🇯🇵 40.74.68.248

🇺🇸 4.37.150.238

🇳🇱 204.76.203.4

🇺🇦 194.247.173.99

🇦🇷 190.112.93.236

🇧🇷 186.215.245.175

🇧🇷 177.221.246.91

🇺🇸 148.59.129.15

🇨🇳 123.144.25.61

🇷🇺 95.174.115.158

🇳🇱 94.154.43.63

🇹🇷 88.252.57.208

🇺🇸 66.132.186.210

🇳🇱 45.148.10.151

🇲🇷 41.188.108.15

🇷🇴 2.57.122.53

🇨🇳 1.80.1.103