36.68.52.46
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- PT TELKOM INDONESIA
- Usage Type
- Fixed Line ISP
- ASN
- AS7713
- Domain Name
- telkom.co.id
- Country
- 🇮🇩 Indonesia
- City
- Pekalongan, Central Java
Abuse Reports
Total reports
71 from
32 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇩🇪 LRob |
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.0.0 Safari/537.36
|
Web App Attack Hacking | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| Anonymous |
(PERMBLOCK) 36.68.52.46 (ID/Indonesia/-) has had more than 4 temp blocks
|
Hacking | |
| Anonymous |
(wordpress) Failed wordpress login from 36.68.52.46 (ID/Indonesia/-)
|
Brute-Force | |
| 🇩🇪 4server |
|
Port Scan Brute-Force Web App Attack | |
| 🇩🇪 hackthetime |
$method: /xmlrpc.php: $body
|
Web App Attack | |
| 🇦🇺 afleventoffice.com.au |
POST /xmlrpc.php HTTP/1.1
|
Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /[a-z0-9]{1,12}\.php (Match: /xmlrpc.php)
|
Hacking Exploited Host Web App Attack | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇸🇬 securejdprop |
This IP was detected by CrowdSec triggering custom/vpatch-xmlrpc-abuse.
|
Hacking | |
| 🇳🇱 Site.eu |
Repeated wp-login/xmlrpc attempts
|
Brute-Force SSH | |
| Anonymous |
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
|
Hacking Web App Attack | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇫🇷 tecnicorioja |
POST /xmlrpc.php [27/Sep/2026:05:31:02
|
Web App Attack Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown