JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

36.68.54.16

Activity Trending Down

Abuse Confidence Score

13% Caution

12 reports

11 reporters · latest 4 weeks ago

ISP: PT TELKOM INDONESIA
Usage Type: Fixed Line ISP
ASN: AS7713
Domain Name: telkom.co.id
Country: 🇮🇩 Indonesia
City: Pekalongan, Central Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 11 distinct reporters

First reported

June 15th 2021

Most recent report

4 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇧🇪 Belgium 1

Most common categories Web App Attack 3 Bad Web Bot 2 Brute-Force 1

Old reports The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-10-17 04:18:22 UTC · (4 weeks ago)		Web App Attack
🇩🇪 ghostwarriors	2026-10-10 03:20:18 UTC · (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-10-10 02:51:56 UTC · (1 month ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-29 07:00:00 UTC · (3 months ago)	Apache probe; attempts=40; exact paths: /xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-07-25 13:55:09 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 konseptit	2026-07-24 22:16:31 UTC · (3 months ago)	(wordpress) Failed wordpress login from 36.68.54.16 (ID/Indonesia/-)	Brute-Force
Anonymous	2026-07-24 03:46:28 UTC · (3 months ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
Anonymous	2026-05-03 00:14:31 UTC · (6 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-11-21 10:24:08 UTC · (11 months ago)	[Fri Nov 21 16:36:10.992649 2025] [security2:error] [pid 342721:tid 140502434285248] [client 36.68.54.16:12953] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/ ... show more [Fri Nov 21 16:36:10.992649 2025] [security2:error] [pid 342721:tid 140502434285248] [client 36.68.54.16:12953] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "199"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=944%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-29-maret-4-april-2016&start=50 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=944%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-29-maret-4-april-2016&start=..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSAyihgUs2u3XiI- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-10 15:04:49 UTC · (1 year ago)	[Fri Oct 10 20:52:09.239647 2025] [security2:error] [pid 1059886:tid 139973536675520] [client 36.68.54.16:30340] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc ... show more [Fri Oct 10 20:52:09.239647 2025] [security2:error] [pid 1059886:tid 139973536675520] [client 36.68.54.16:30340] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=623&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2017&start=60 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=623&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOkPiexYrfToxe ... show less	Hacking Web App Attack
🇿🇦 IrisFlower	2021-06-16 07:47:32 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 36.68.54.16 to port 80 [J]	Port Scan Hacking
🇦🇹 ipi.at	2021-06-15 20:19:38 UTC · (5 years ago)	2021-06-16T02:19:28.191670n23.at sshd[4016660]: Invalid user admin from 36.68.54.16 port 30947 2021-06-16T02:19:28.394323n23.at sshd[4016660]: Failed none for invalid user admin from 36.68.54.16 port 30947 ssh2 2021-06-16T02:19:37.159864n23.at sshd[4 ... show more 2021-06-16T02:19:28.191670n23.at sshd[4016660]: Invalid user admin from 36.68.54.16 port 30947 2021-06-16T02:19:28.394323n23.at sshd[4016660]: Failed none for invalid user admin from 36.68.54.16 port 30947 ssh2 2021-06-16T02:19:37.159864n23.at sshd[4016666]: Invalid user admin from 36.68.54.16 port 26834 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇿🇦 197.95.67.208

🇷🇺 194.186.99.146

🇬🇧 193.176.29.2

🇺🇦 195.62.37.67

🇷🇴 193.46.255.86

🇭🇰 156.225.1.86

🇺🇸 152.232.129.55

🇺🇸 136.85.184.149

🇮🇳 122.168.197.138

🇰🇷 112.161.42.97

🇺🇸 107.182.130.81

🇰🇷 101.33.81.73

🇮🇹 95.255.158.96

🇮🇷 87.107.195.51

🇺🇸 66.132.159.123

🇸🇬 47.82.13.97

🇺🇸 20.65.202.178

🇰🇷 211.178.165.251

🇺🇸 205.210.31.87

🇰🇷 121.129.152.164