JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.68.52.113

36.68.52.113 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 4%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.68.52.113

Whois 36.68.52.113

IP Abuse Reports for 36.68.52.113:

This IP address has been reported a total of 15 times from 9 distinct sources. 36.68.52.113 was first reported on September 8th 2021, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-27 15:30:46 (18 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2025-10-08 02:17:04 (8 months ago)	[Wed Oct 08 06:31:30.334683 2025] [security2:error] [pid 441729:tid 140371563538112] [client 36.68.5 ... show more [Wed Oct 08 06:31:30.334683 2025] [security2:error] [pid 441729:tid 140371563538112] [client 36.68.52.113:12547] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=472&id=553%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-mei-1-juni-2015&start=90 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=472&id=553%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-mei-1-juni-2015&start=90 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOWi0oMiFTKHul ... show less	Hacking Web App Attack
🇺🇸 cybsecaoccol	2024-05-10 03:47:18 (2 years ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇻🇪 VenCERT	2024-04-20 12:19:57 (2 years ago)	trying to access non-authorized port	Port Scan
🇨🇼 ATV	2023-02-21 08:41:02 (3 years ago)	Unsolicited connection attempts to port 1433	Hacking
🇨🇼 ATV	2023-02-21 07:41:01 (3 years ago)	Unsolicited connection attempts to port 3306	Port Scan
🇿🇦 IrisFlower	2021-10-19 11:40:39 (4 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.113 to port 23 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-10-18 08:39:38 (4 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.113 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-10-17 23:37:11 (4 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.113 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-10-15 20:08:23 (4 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.113 to port 23 [J]	Port Scan Hacking
🇩🇪 www.blocklist.de	2021-09-09 12:20:30 (4 years ago)	Sep 9 18:05:55 srv1 sshd[846]: Did not receive identification string from 36.68.52.113 Sep 9 18:06 ... show more Sep 9 18:05:55 srv1 sshd[846]: Did not receive identification string from 36.68.52.113 Sep 9 18:06:20 srv1 sshd[848]: Invalid user admin from 36.68.52.113 Sep 9 18:06:20 srv1 sshd[848]: Failed none for invalid user admin from 36.68.52.113 port 7725 ssh2 Sep 9 18:06:20 srv1 sshd[849]: Connection closed by 36.68.52.113 Sep 9 18:06:45 srv1 sshd[858]: Invalid user admin from 36.68.52.113 Sep 9 18:06:45 srv1 sshd[858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.52.113 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.68.52.113 show less	FTP Brute-Force Hacking
🇳🇴 Harald	2021-09-09 09:13:26 (4 years ago)	Sep 9 13:13:24 jump sshd[179803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Sep 9 13:13:24 jump sshd[179803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.52.113 Sep 9 13:13:23 jump sshd[179803]: Invalid user demo from 36.68.52.113 port 24314 Sep 9 13:13:25 jump sshd[179803]: Failed password for invalid user demo from 36.68.52.113 port 24314 ssh2 ... show less	Brute-Force SSH
🇳🇴 Harald	2021-09-09 08:53:05 (4 years ago)	Sep 9 12:52:55 jump sshd[178836]: Failed password for root from 36.68.52.113 port 13727 ssh2 Sep 9 ... show more Sep 9 12:52:55 jump sshd[178836]: Failed password for root from 36.68.52.113 port 13727 ssh2 Sep 9 12:53:03 jump sshd[178845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.52.113 user=root Sep 9 12:53:05 jump sshd[178845]: Failed password for root from 36.68.52.113 port 12343 ssh2 ... show less	Brute-Force SSH
🇳🇴 Harald	2021-09-09 08:32:32 (4 years ago)	Sep 9 12:32:23 jump sshd[177928]: Invalid user admin from 36.68.52.113 port 1624 Sep 9 12:32:24 ju ... show more Sep 9 12:32:23 jump sshd[177928]: Invalid user admin from 36.68.52.113 port 1624 Sep 9 12:32:24 jump sshd[177928]: Failed none for invalid user admin from 36.68.52.113 port 1624 ssh2 Sep 9 12:32:31 jump sshd[177934]: Invalid user admin from 36.68.52.113 port 9644 ... show less	Brute-Force SSH
Anonymous	2021-09-08 16:51:31 (4 years ago)	Sep 8 20:51:31 bgvacc sshd[151568]: Invalid user admin from 36.68.52.113 port 19519 Sep 8 20:51:31 ... show more Sep 8 20:51:31 bgvacc sshd[151568]: Invalid user admin from 36.68.52.113 port 19519 Sep 8 20:51:31 bgvacc sshd[151568]: Failed none for invalid user admin from 36.68.52.113 port 19519 ssh2 ... show less	Port Scan Hacking Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:c015:5dc3::1

🇺🇸 172.104.30.66

🇨🇳 117.34.125.173

🇳🇱 91.92.40.13

🇧🇬 79.124.58.218

🇺🇸 66.132.172.120

🇦🇷 45.230.80.53

🇬🇧 35.203.210.148

🇳🇱 5.253.86.214

🇳🇱 5.61.209.92

🇰🇷 211.37.174.173

🇳🇱 185.136.15.13

🇱🇹 141.98.11.129

🇺🇸 137.184.29.169

🇧🇷 129.121.42.131

🇳🇱 91.124.18.144

🇨🇦 85.217.149.41

🇺🇸 64.62.156.80

🇺🇸 52.165.81.64

🇹🇷 45.67.155.118