36.37.158.90
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- VIETTEL (CAMBODIA) PTE, LTD.
- Usage Type
- Fixed Line ISP
- ASN
- AS38623
- Domain Name
- metfone.com.kh
- Country
- 🇰🇭 Cambodia
- City
- Kampong Speu, Kampong Speu Province
No reports in the last 60 days
36.37.158.90 has been reported 64 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
64 from
40 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Zkillu |
UDP flood attack on 31.56.58.1 UDP:22 (2026-08-15 17:53-18:05 UTC). Peak aggregate 47 Gbps / 4.2 Mpps against victim AS215599. This IP (AS38623) sent ~43018 packets (59.49 MB) during the attack window. Likely a compromised device (Mirai-like botnet).
|
DDoS Attack Exploited Host | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/36.37.158.90
|
SSH | |
| 🇷🇴 abuse_IP_reporter |
May 4 17:30:32 server UFW BLOCK SRC=36.37.158.90 PROTO=TCP SPT=39094 DPT=23
|
Port Scan | |
| 🇺🇸 NetGuard |
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-05-04 12:58:55 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-05-04 10:17:30 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 sthoyer.de |
May 4 08:30:34 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=36.37.158.90 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=47344 PROTO=TCP SPT=43745 DPT=23 WINDOW=5358 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇩🇪 zupan |
Blocked by UFW on vps [23/tcp] | SPT: 6806 | TTL: 51 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇺🇸 technash |
Unauthorized network connection attempt(s) via TCP port(s) detected from TI-mapped IP entity [Fortinet/Sentinel]. Deny/drop traffic.
|
Port Scan | |
| 🇺🇸 RAP |
2026-05-04 05:21:32 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=21744 dstport=23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=58427 dstport=23
|
Port Scan | |
| 🇺🇸 RAP |
2026-05-04 00:47:09 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 23/tcp
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown