JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.68.52.207

36.68.52.207 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.68.52.207

Whois 36.68.52.207

IP Abuse Reports for 36.68.52.207:

This IP address has been reported a total of 19 times from 11 distinct sources. 36.68.52.207 was first reported on June 8th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-18 19:01:59 (2 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
🇩🇪 FeG Deutschland	2026-02-19 13:38:46 (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 hermawan	2025-11-15 00:38:03 (6 months ago)	[Sat Nov 15 07:36:15.104841 2025] [security2:error] [pid 317380:tid 140213460399808] [client 36.68.5 ... show more [Sat Nov 15 07:36:15.104841 2025] [security2:error] [pid 317380:tid 140213460399808] [client 36.68.52.207:22590] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=784%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-nopember-2015&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=784%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-3-9-nopember-2015&start=120 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRfK_78iCUHHcT ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-13 15:15:29 (6 months ago)	[Thu Nov 13 22:12:34.690690 2025] [security2:error] [pid 1642487:tid 140633336440512] [client 36.68. ... show more [Thu Nov 13 22:12:34.690690 2025] [security2:error] [pid 1642487:tid 140633336440512] [client 36.68.52.207:27542] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=1042%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-juni-04-juli-2016&start=100 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=1042%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-juni-04-juli-2016&start..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRX1Yn9LsE4yn ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-10 00:29:15 (6 months ago)	[Mon Nov 10 07:28:28.851185 2025] [security2:error] [pid 1785572:tid 140440536868544] [client 36.68. ... show more [Mon Nov 10 07:28:28.851185 2025] [security2:error] [pid 1785572:tid 140440536868544] [client 36.68.52.207:19177] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=479&id=673%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-25-31-agustus-2015&start=60 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=479&id=673%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-25-31-agustus-2015&start=60 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRExrADvQ717s ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-08-04 22:44:33 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/36.68.52.207	Web App Attack
🇨🇳 ThreatBook.io	2025-07-31 22:42:45 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/36.68.52.207	Web App Attack
🇮🇩 hermawan	2024-07-02 21:48:38 (1 year ago)	[Wed Jul 03 04:48:30.737935 2024] [security2:error] [pid 1316121:tid 135575004776000] [client 36.68. ... show more [Wed Jul 03 04:48:30.737935 2024] [security2:error] [pid 1316121:tid 135575004776000] [client 36.68.52.207:7067] [client 36.68.52.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2147"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/126.0.6478.71 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2023-09-13 10:22:30 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇷 NotMarco	2023-09-13 01:44:03 (2 years ago)	Unauthorized connection attempt from 36.68.52.207 to port 3306/TCP	Port Scan Hacking
Anonymous	2023-07-22 02:52:50 (2 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇷🇸 Smel	2023-04-22 10:33:16 (3 years ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇿🇦 IrisFlower	2023-02-11 20:41:58 (3 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.207 to port 23 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-02-07 03:34:17 (3 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.207 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-02-07 01:02:47 (3 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.207 to port 8080 [J]	Port Scan Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.151.70.9

🇵🇰 144.48.128.97

🇪🇪 109.206.241.199

🇫🇷 91.231.89.233

🇳🇱 45.148.10.152

🇱🇻 196.196.53.91

🇺🇸 195.184.76.202

🇺🇸 184.179.212.97

🇨🇳 180.168.24.186

🇳🇱 176.65.148.84

🇺🇸 172.191.132.202

🇸🇬 165.154.236.104

🇺🇸 162.216.149.9

🇭🇰 144.48.241.162

🇺🇸 143.42.1.191

🇮🇩 103.210.35.122

🇹🇼 101.13.5.30

🇸🇪 85.203.44.44

🇺🇸 66.132.172.158

🇺🇸 50.188.204.213