JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.68.52.72

36.68.52.72 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 77%: ?

77%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.68.52.72

Whois 36.68.52.72

IP Abuse Reports for 36.68.52.72:

This IP address has been reported a total of 39 times from 23 distinct sources. 36.68.52.72 was first reported on May 5th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Marc	2026-07-27 06:31:02 (1 day ago)	36.68.52.72 - - [27/Jul/2026:08:30:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack/13.0; ... show more 36.68.52.72 - - [27/Jul/2026:08:30:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack/13.0; WordPress/6.1; http://site61945051.com" 36.68.52.72 - - [27/Jul/2026:08:30:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 36.68.52.72 - - [27/Jul/2026:08:31:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4667 "-" "Jetpack/12.0; WordPress/6.2; http://site54228631.com" show less	Brute-Force Web App Attack
Anonymous	2026-07-27 05:29:56 (1 day ago)	[redacted] 36.68.52.72 - - [27/Jul/2026:07:29:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jet ... show more [redacted] 36.68.52.72 - - [27/Jul/2026:07:29:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.68.52.72 - - [27/Jul/2026:07:29:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 36.68.52.72 - - [27/Jul/2026:07:29:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 36.68.52.72 - - [27/Jul/2026:07:29:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.68.52.72 - - [27/Jul/2026:07:29:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-27 04:59:11 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-27 02:50:23 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 02:25:13 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 05:04:33 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 36.68.52.72 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 36.68.52.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 01:04:20.461860 2026] [security2:error] [pid 1714124:tid 1714124] [client 36.68.52.72:31894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 36.68.52.72 (+1 hits since last alert)\|londongroup.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "londongroup.info"] [uri "/xmlrpc.php"] [unique_id "amWVVA7_3yzSQmzzH1WH-QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-25 11:56:50 (3 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇺🇸 Dolphi	2026-07-25 03:40:06 (3 days ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-07-23 14:00:08 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-23 06:13:00 (5 days ago)	[redacted] 36.68.52.72 - - [23/Jul/2026:08:12:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jet ... show more [redacted] 36.68.52.72 - - [23/Jul/2026:08:12:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 36.68.52.72 - - [23/Jul/2026:08:12:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.68.52.72 - - [23/Jul/2026:08:12:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site75871638.com" [redacted] 36.68.52.72 - - [23/Jul/2026:08:12:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site70283046.com" [redacted] 36.68.52.72 - - [23/Jul/2026:08:12:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-07-22 02:16:36 (6 days ago)	Known malicious PHP file or CMS probe	Web App Attack
Anonymous	2026-07-21 05:41:55 (1 week ago)	[redacted] 36.68.52.72 - - [21/Jul/2026:07:41:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jet ... show more [redacted] 36.68.52.72 - - [21/Jul/2026:07:41:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 36.68.52.72 - - [21/Jul/2026:07:41:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 36.68.52.72 - - [21/Jul/2026:07:41:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.68.52.72 - - [21/Jul/2026:07:41:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.68.52.72 - - [21/Jul/2026:07:41:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" ... show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-21 04:10:58 (1 week ago)	(xmlrpc) Apache: Failed xmlrpc access from 36.68.52.72 (ID/Indonesia/-): 10 in the last 3600 secs (0 ... show more (xmlrpc) Apache: Failed xmlrpc access from 36.68.52.72 (ID/Indonesia/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇫🇷 dynamix	2026-07-20 13:52:41 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-19 12:36:50 (1 week ago)	[redacted] 36.68.52.72 - - [19/Jul/2026:14:36:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jet ... show more [redacted] 36.68.52.72 - - [19/Jul/2026:14:36:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.68.52.72 - - [19/Jul/2026:14:36:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.68.52.72 - - [19/Jul/2026:14:36:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.68.52.72 - - [19/Jul/2026:14:36:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.68.52.72 - - [19/Jul/2026:14:36:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 117.195.199.62

🇨🇳 117.158.166.73

🇺🇸 172.253.1.28

🇺🇸 143.198.100.122

🇻🇳 123.21.131.121

🇺🇸 98.46.11.40

🇺🇸 64.62.156.171

🇫🇷 37.187.35.26

🇺🇸 130.131.200.243

🇨🇳 221.229.220.180

🇧🇷 201.15.149.254

🇰🇪 196.216.84.132

🇺🇸 162.216.149.174

🇺🇸 159.203.124.41

🇲🇽 148.230.253.111

🇺🇸 147.182.207.83

🇺🇸 146.88.241.89

🇫🇷 141.101.68.226

🇷🇺 176.194.42.222

🇺🇸 157.245.220.79