JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.70.109.121

36.70.109.121 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.70.109.121

Whois 36.70.109.121

IP Abuse Reports for 36.70.109.121:

This IP address has been reported a total of 51 times from 34 distinct sources. 36.70.109.121 was first reported on March 21st 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-09 22:29:52 (3 days ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-09 22:03:01 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-08. show less	Web App Attack SSH Hacking
Anonymous	2026-07-09 10:35:14 (3 days ago)	"GET /.git/ HTTP/1.1"	Hacking Web App Attack
🇺🇸 MPL	2026-07-09 10:35:06 (3 days ago)	tcp/443 (10 or more attempts)	Port Scan
🇺🇸 Charlesiv	2026-07-09 10:06:23 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 7713 (PT Telekomunikasi ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 7713 (PT Telekomunikasi Indonesia) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/ Timestamp: 2026-07-09T01:49:28Z Ray ID: a183ac1cff58ce59 UA: Mozilla/5.0 (X11; Linux x86_64) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 10:03:59 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:03:47.524023 2026] [security2:error] [pid 7040:tid 7040] [client 36.70.109.121:59140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clowaterart.com"] [uri "/.git/"] [unique_id "ak9yAwkEow00J_Q4qDUXgAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 etu brutus	2026-07-09 09:52:38 (3 days ago)	36.70.109.121 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-07-09 09:38:46 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 05:38:32.966814 2026] [security2:error] [pid 21513:tid 21513] [client 36.70.109.121:60833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityofportales.com"] [uri "/.git/"] [unique_id "ak9sGNNV9_0ExMsGSi3scAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 09:18:06 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 05:18:00.679989 2026] [security2:error] [pid 30678:tid 30678] [client 36.70.109.121:65418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chevronparkett.com"] [uri "/.git/HEAD"] [unique_id "ak9nSC_iKPMdUmNY7NHD8QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 08:50:10 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:49:55.260191 2026] [security2:error] [pid 22828:tid 22828] [client 36.70.109.121:57864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebrationofmike.com"] [uri "/.git/"] [unique_id "ak9gsyNVNgBxi4H51sp7lgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-09 08:36:28 (4 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 36.70.109.121 (ID/Indonesia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 36.70.109.121 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 Lee Daniel	2026-07-09 08:12:21 (4 days ago)	36.70.109.121 - - [09/Jul/2026:04:12:21 -0400] "GET /.git/ HTTP/1.1" 404 6315 "-" "Mozilla/5.0 (X11; ... show more 36.70.109.121 - - [09/Jul/2026:04:12:21 -0400] "GET /.git/ HTTP/1.1" 404 6315 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 ByeByte API	2026-07-09 07:30:32 (4 days ago)	byebyte.space auth: GET /.git/ at 2026-07-09T07:30:32Z. Honeypot path hit; firewall auto-banned the ... show more byebyte.space auth: GET /.git/ at 2026-07-09T07:30:32Z. Honeypot path hit; firewall auto-banned the IP for 24h. UA: 'Mozilla/5.0 (X11; Linux x86_64)'. Accept-Encoding: 'gzip, br'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack Port Scan
🇺🇸 Rip	2026-07-09 07:27:11 (4 days ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 06:49:10 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 36.70.109.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 02:48:52.645240 2026] [security2:error] [pid 4490:tid 4490] [client 36.70.109.121:50783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownbarn.com"] [uri "/.git/"] [unique_id "ak9EVEmndyyHW1H1mezH9AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.46.0.3

🇬🇧 188.240.59.32

🇺🇸 40.90.235.65

🇨🇦 20.151.5.71

🇺🇸 18.97.9.100

🇩🇪 195.63.20.241

🇳🇱 185.212.129.205

🇲🇾 180.75.123.179

🇨🇳 175.27.171.245

🇺🇸 146.88.241.56

🇰🇷 116.125.120.27

🇨🇳 101.126.55.95

🇹🇷 94.154.43.181

🇷🇺 80.249.147.192

🇰🇷 59.24.133.197

🇬🇧 51.104.29.194

🇺🇸 35.175.190.38

🇧🇷 201.71.192.108

🇷🇺 185.40.30.168

🇮🇶 169.224.33.131