AbuseIPDB » 36.70.225.60

36.70.225.60 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 72%: ?

72%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
Domain Name	telkom.co.id
Country	Indonesia
City	Jakarta, Jakarta

Report 36.70.225.60

Whois 36.70.225.60

IP Abuse Reports for 36.70.225.60:

This IP address has been reported a total of 59 times from 27 distinct sources. 36.70.225.60 was first reported on November 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
myintarweb	2024-11-11 18:00:26 (2 weeks ago)	36.70.225.60 - - [05/Nov/2024:01:31:58 +0000] 443 "GET /.git/ HTTP/1.1" 404 5229 "-" "Mozilla/5.0 (X ... show more36.70.225.60 - - [05/Nov/2024:01:31:58 +0000] 443 "GET /.git/ HTTP/1.1" 404 5229 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Hacking Bad Web Bot Web App Attack
filou812	2024-11-07 03:09:35 (3 weeks ago)	url tried is "/.git/"	Web App Attack
rtbh.com.tr	2024-11-06 20:53:29 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
MAGIC	2024-11-06 18:03:31 (3 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MHuiG	2024-11-06 16:10:39 (3 weeks ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 771 ... show moreThe IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 7713 clientASNDescription: TELKOMNET-AS-AP PT Telekomunikasi Indonesia clientCountryName: ID clientIP: 36.70.225.60 clientRequestHTTPHost: friends.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.git/HEAD clientRequestQuery: datetime: 2024-11-06T15:21:36Z rayName: 8de613047b2e91b4 ruleId: f4a2c940dd7944e58e72d246ea29b5af userAgent: Mozilla/5.0 (X11; Linux x86_64). Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
dwmp	2024-11-06 15:09:15 (3 weeks ago)	Url probing: /.git/	Web App Attack
sid3windr	2024-11-06 13:48:45 (3 weeks ago)	GET /.git/ (Tarpitted for , wasted 0B)	Web App Attack
MHuiG	2024-11-06 12:15:47 (3 weeks ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 771 ... show moreThe IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 7713 clientASNDescription: TELKOMNET-AS-AP PT Telekomunikasi Indonesia clientCountryName: ID clientIP: 36.70.225.60 clientRequestHTTPHost: static.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.git/HEAD clientRequestQuery: datetime: 2024-11-06T10:39:10Z rayName: 8de475495a36ce3d ruleId: f4a2c940dd7944e58e72d246ea29b5af userAgent: Mozilla/5.0 (X11; Linux x86_64). Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
instant	2024-11-06 07:43:20 (3 weeks ago)	06.11.2024 07:43:20 Git repository scan (/.git)	Hacking Web App Attack
rafled	2024-11-06 07:34:11 (3 weeks ago)	attempt to scan and scrape for env files and or files that expose the web app version	Bad Web Bot
TPI-Abuse	2024-11-06 05:42:16 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 00:42:07.699554 2024] [security2:error] [pid 12454:tid 12454] [client 36.70.225.60:52769] [client 36.70.225.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graciousholding.com"] [uri "/.git/"] [unique_id "ZysBr6W0h7Y5ANn_cgNCtQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
paissangroup	2024-11-06 03:14:29 (3 weeks ago)	Multiple WAF Violations	Web App Attack
MHuiG	2024-11-06 00:39:59 (3 weeks ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 771 ... show moreThe IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 7713 clientASNDescription: TELKOMNET-AS-AP PT Telekomunikasi Indonesia clientCountryName: ID clientIP: 36.70.225.60 clientRequestHTTPHost: github.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.git/ clientRequestQuery: datetime: 2024-11-06T00:38:02Z rayName: 8de104b7cf52ce82 ruleId: f4a2c940dd7944e58e72d246ea29b5af userAgent: Mozilla/5.0 (X11; Linux x86_64). Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
TPI-Abuse	2024-11-05 23:20:55 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 18:20:40.313787 2024] [security2:error] [pid 1740:tid 1740] [client 36.70.225.60:52966] [client 36.70.225.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kesslerphd.com"] [uri "/.git/"] [unique_id "ZyqoSMOiCKUlVU1zQ7Y3ZwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-05 21:31:21 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 36.70.225.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 16:31:10.233384 2024] [security2:error] [pid 20968:tid 20968] [client 36.70.225.60:51718] [client 36.70.225.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekbit.com"] [uri "/.git/"] [unique_id "ZyqOnmjmp2HUMIXWCkNBowAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack