JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.80.169.150

36.80.169.150 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 91%: ?

91%

ISP	PT TELKOM INDONESIA Menara Multimedia Lt.7 Jl. Kebon sirih No.12 JAKARTA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Balikpapan, East Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.80.169.150

Whois 36.80.169.150

IP Abuse Reports for 36.80.169.150:

This IP address has been reported a total of 19 times from 16 distinct sources. 36.80.169.150 was first reported on September 21st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 abdubhai	2026-09-22 01:06:07 (2 days ago)	36.80.169.150 - - [22/Sep/2026:0 ...	Brute-Force
🇩🇪 dbmwebdesign	2026-09-22 00:55:35 (2 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-22 00:35:28 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 LRob	2026-09-22 00:31:24 (2 days ago)	This address is trying passwords on WordPress logins we host — through the login page or xmlrpc.php, ... show more This address is trying passwords on WordPress logins we host — through the login page or xmlrpc.php, often across several sites — for accounts it does not own. This is credential brute force or credential stuffing, the way sites get hijacked to spread malware and spam; blocked. Please check the machine for malware or an attack tool. \| path: /xmlrpc.php \| 2026-09-22 00:31 UTC show less	Brute-Force Web App Attack
🇺🇸 cwytech	2026-09-21 23:58:28 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-21 23:45:35 (2 days ago)	4.960 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇮🇹 CoreTech srl	2026-09-21 23:43:58 (2 days ago)	cloudlinux2 fail2ban: 2026-09-22 01:38:58,468 fail2ban.filter [1598]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-22 01:38:58,468 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 36.80.169.150 - 2026-09-22 01:38:58cloudlinux2 fail2ban: 2026-09-22 01:40:17,416 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 36.80.169.150 - 2026-09-22 01:40:17cloudlinux2 fail2ban: 2026-09-22 01:40:54,826 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 185.109.48.230 - 2026-09-22 01:40:53cloudlinux2 fail2ban: 2026-09-22 01:41:16,064 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 36.80.169.150 - 2026-09-22 01:41:16cloudlinux2 fail2ban: 2026-09-22 01:41:16,373 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 36.80.169.150cloudlinux2 fail2ban: 2026-09-22 01:41:16,379 fail2ban.filter [1598]: INFO [recidive] Found 36.80.169.150 - 2026-09-22 01:41:16cloudlinux2 fail2ban: 2026-09-22 01:42:28,953 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.32.77.155 - 2026-09-22 01:42:28cloudlinux2 fail2ban: 2026-09- show less	Web App Attack
Anonymous	2026-09-21 23:41:20 (2 days ago)	[redacted] 36.80.169.150 - - [22/Sep/2026:01:40:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "J ... show more [redacted] 36.80.169.150 - - [22/Sep/2026:01:40:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:40:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.1; WordPress/6.1; http://site37078587.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:40:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:40:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 36.80.169.150 - - [22/Sep/2026:01:41:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-09-21 23:01:47 (2 days ago)	36.80.169.150 - - [21/Sep/2026:19:00:43 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5495 "-" "WordPress.c ... show more 36.80.169.150 - - [21/Sep/2026:19:00:43 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5495 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:19:00:54 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5495 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:19:01:26 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5495 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:19:01:36 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5495 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:19:01:47 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5479 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-09-21 23:01:29 (2 days ago)	[redacted] 36.80.169.150 - - [22/Sep/2026:01:00:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 36.80.169.150 - - [22/Sep/2026:01:00:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 36.80.169.150 - - [22/Sep/2026:01:00:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:01:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site17968791.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:01:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.80.169.150 - - [22/Sep/2026:01:01:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" ... show less	Hacking Web App Attack
Anonymous	2026-09-21 06:41:09 (3 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 IndigoRidge	2026-09-21 06:28:16 (3 days ago)	36.80.169.150 - - [21/Sep/2026:02:26:14 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.c ... show more 36.80.169.150 - - [21/Sep/2026:02:26:14 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:02:26:36 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:02:26:47 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:02:27:20 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 36.80.169.150 - - [21/Sep/2026:02:28:15 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-09-21 05:50:16 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-21 05:23:29 (3 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-09-21 05:19:49 (3 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.226

🇬🇧 188.240.59.46

🇭🇰 123.58.215.196

🇮🇳 104.211.74.130

🇳🇱 91.92.42.254

🇮🇹 88.147.30.59

🇺🇸 68.10.53.95

🇳🇱 45.148.10.60

🇳🇱 185.45.193.187

🇧🇷 131.255.229.23

🇬🇧 81.19.219.254

🇸🇬 47.128.116.7

🇧🇪 35.240.100.200

🇳🇱 34.91.58.55

🇸🇪 31.208.14.62

🇬🇧 31.14.254.88

🇨🇳 14.216.246.212

🇬🇧 5.226.140.67

🇸🇬 2402:1f00:8000:800::4482

🇬🇧 195.96.139.112