JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.68.54.2

36.68.54.2 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 23%: ?

23%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.68.54.2

Whois 36.68.54.2

IP Abuse Reports for 36.68.54.2:

This IP address has been reported a total of 12 times from 11 distinct sources. 36.68.54.2 was first reported on July 25th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-08-21 08:20:01 (3 days ago)	(wordpress) Failed wordpress login from 36.68.54.2 (ID/Indonesia/-)	Brute-Force
🇧🇪 madeit	2026-08-21 08:09:41 (3 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 04:25:33 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 36.68.54.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 36.68.54.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 00:25:19.557846 2026] [security2:error] [pid 17187:tid 17187] [client 36.68.54.2:28470] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 36.68.54.2 (+1 hits since last alert)\|shelbysmoak.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shelbysmoak.com"] [uri "/xmlrpc.php"] [unique_id "aofTLxUODDE9sg-9l1KAigAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-29 23:38:03 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-10-26 15:20:35 (9 months ago)	[Sun Oct 26 21:14:08.678202 2025] [security2:error] [pid 1094177:tid 140450884118208] [client 36.68. ... show more [Sun Oct 26 21:14:08.678202 2025] [security2:error] [pid 1094177:tid 140450884118208] [client 36.68.54.2:8740] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&start=20 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&start=20 R..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aP4ssF6cWjMt61q7 ... show less	Hacking Web App Attack
🇺🇸 MPL	2023-12-09 18:57:13 (2 years ago)	tcp/8080	Port Scan
🇺🇸 MPL	2023-12-09 18:57:13 (2 years ago)	tcp/8080	Port Scan
🇿🇦 maximonline.co.za	2023-09-24 00:30:03 (2 years ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇺🇸 mnsf	2021-11-27 15:00:55 (4 years ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇫🇷 Raphaël	2021-07-30 23:20:13 (5 years ago)	Jul 31 05:20:05 raspberrypi sshd[15143]: Failed none for invalid user admin from 36.68.54.2 port 330 ... show more Jul 31 05:20:05 raspberrypi sshd[15143]: Failed none for invalid user admin from 36.68.54.2 port 33078 ssh2 ... show less	Brute-Force SSH
🇫🇷 Faeeth	2021-07-30 23:10:16 (5 years ago)	Multiple hits on Honeypot	Brute-Force SSH
Anonymous	2021-07-25 21:36:10 (5 years ago)	Jul 26 01:36:08 bgvacc sshd[291376]: Invalid user admin from 36.68.54.2 port 15823 Jul 26 01:36:09 b ... show more Jul 26 01:36:08 bgvacc sshd[291376]: Invalid user admin from 36.68.54.2 port 15823 Jul 26 01:36:09 bgvacc sshd[291376]: Failed none for invalid user admin from 36.68.54.2 port 15823 ssh2 ... show less	Port Scan Hacking Brute-Force SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 116.206.89.14

🇫🇷 91.231.89.69

🇺🇸 91.230.168.255

🇨🇦 85.217.149.26

🇲🇾 47.250.83.23

🇳🇱 45.156.87.93

🇦🇷 190.196.253.124

🇮🇳 122.168.194.41

🇧🇩 103.240.4.35

🇱🇹 77.90.185.5

🇹🇭 49.49.4.219

🇸🇪 46.59.92.80

🇺🇸 31.132.55.197

🇨🇦 20.48.147.90

🇨🇳 211.143.37.66

🇺🇸 195.184.76.187

🇩🇪 194.187.176.208

🇷🇴 193.32.162.84

🇧🇷 191.177.175.236

🇳🇱 185.242.226.81