JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.68.55.37

36.68.55.37 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.68.55.37

Whois 36.68.55.37

IP Abuse Reports for 36.68.55.37:

This IP address has been reported a total of 28 times from 14 distinct sources. 36.68.55.37 was first reported on May 4th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-25 21:18:27 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-04-22 08:00:58 (4 months ago)	Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 6.1/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-22 07:01:02 (4 months ago)	Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-22 06:00:16 (4 months ago)	Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 5.3/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 36.68.55.37. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-28 21:43:48 (9 months ago)	[Sat Nov 29 04:38:13.415443 2025] [security2:error] [pid 574414:tid 140335003903680] [client 36.68.5 ... show more [Sat Nov 29 04:38:13.415443 2025] [security2:error] [pid 574414:tid 140335003903680] [client 36.68.55.37:7145] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=477&id=916%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-8-14-maret-2016&start=70 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=916%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-8-14-maret-2016&start=70 Request B..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSoWRddGLullGWFO ... show less	Hacking Web App Attack
🇷🇸 Scan	2025-09-23 00:16:15 (11 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2025-07-18 12:04:00 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Scan	2024-05-08 01:55:24 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇧🇷 diego	2024-03-01 04:20:09 (2 years ago)	[kvm3859] 03/01/2024-01:20:09.014809, 36.68.55.37, Protocol: 6, ET SCAN Suspicious inbound to MSSQL ... show more [kvm3859] 03/01/2024-01:20:09.014809, 36.68.55.37, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇩🇪 ManagedStack	2023-10-16 05:39:24 (2 years ago)	Wordpress Attack	Web App Attack
🇦🇷 NotMarco	2023-07-13 13:24:40 (3 years ago)	Unauthorized connection attempt from 36.68.55.37 to port 3306/TCP	Port Scan Hacking
🇨🇼 ATV	2023-07-11 09:42:32 (3 years ago)	Unsolicited connection attempts to port 1433	Hacking
🇦🇷 NotMarco	2023-07-10 12:13:13 (3 years ago)	Unauthorized connection attempt from 36.68.55.37 to port 3306/TCP	Port Scan Hacking
Anonymous	2022-01-18 16:06:08 (4 years ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
🇿🇦 IrisFlower	2021-09-06 16:04:41 (4 years ago)	Unauthorized connection attempt detected from IP address 36.68.55.37 to port 23 [J]	Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.252

🇸🇬 162.158.163.165

🇨🇳 150.255.248.251

🇺🇸 74.125.182.89

🇺🇸 64.62.197.96

🇺🇸 64.62.156.24

🇺🇸 47.251.70.202

🇳🇱 45.148.10.247

🇿🇼 197.221.232.44

🇷🇺 178.140.129.139

🇺🇸 162.216.150.189

🇫🇮 147.185.133.168

🇨🇳 120.84.194.161

🇵🇰 103.134.0.250

🇮🇩 103.29.185.162

🇺🇸 91.230.168.160

🇳🇱 89.21.67.165

🇲🇾 47.250.53.113

🇺🇸 45.156.129.95

🇺🇸 44.201.218.27