JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

36.85.217.247

Activity Trending Down

Abuse confidence score ?

1% Caution

13 reports

10 reporters · latest 3 weeks ago

ISP	PT TELKOM INDONESIA STO Gambir 3rd Floor Jl. Medan Merdeka Selatan No. 12 Jakarta 10110
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.net.id
Country	🇮🇩 Indonesia
City	Manado, North Sulawesi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 36.85.217.247

This IP address has been reported a total of 13 times from 10 distinct sources. 36.85.217.247 was first reported on February 24th 2021, and the most recent report was 3 weeks ago. In the last 60 days, the only reporter location was: Germany with 1 report. The only category in these recent reports was: Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-09-01 02:03:12 (3 weeks ago)	Bogus Useragent: 36.85.217.247 - - [01/Sep/2026:04:03:11 +0200] "GET /protocol?id=st_6_98&offset=150 ... show more Bogus Useragent: 36.85.217.247 - - [01/Sep/2026:04:03:11 +0200] "GET /protocol?id=st_6_98&offset=150&seq=172 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows; U; Windows 95) AppleWebKit/533.42.4 (KHTML, like Gecko) Version/4.0.2 Safari/533.42.4" asn=7713 org="Telekomunikasi Indonesia (PT)" country=ID ... show less	Bad Web Bot
🇮🇪 RoboSOC	2026-04-14 07:40:52 (5 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇩🇪 iNetWorker	2026-04-10 10:10:25 (5 months ago)	firewall-block, port(s): 1433/tcp	Port Scan
🇬🇧 gbzret4d	2026-04-10 08:44:16 (5 months ago)	Honeypot [uk-production01]: MSSQL traffic (on 1433) without login credentials	Port Scan
🇸🇰 GOVCERT	2026-04-10 07:48:47 (5 months ago)	Sweep Scan	Port Scan
🇮🇩 hermawan	2025-11-28 04:15:50 (9 months ago)	[Fri Nov 28 10:52:03.515309 2025] [security2:error] [pid 1395810:tid 139900612495040] [client 36.85. ... show more [Fri Nov 28 10:52:03.515309 2025] [security2:error] [pid 1395810:tid 139900612495040] [client 36.85.217.247:10385] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=1064%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-juli-2016&start=150 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=1064%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-juli-2016&start=150 Request..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSkcY8CRJuXA ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-27 08:07:14 (10 months ago)	[Mon Oct 27 12:57:46.921553 2025] [security2:error] [pid 389834:tid 139660004062912] [client 36.85.2 ... show more [Mon Oct 27 12:57:46.921553 2025] [security2:error] [pid 389834:tid 139660004062912] [client 36.85.217.247:29234] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "180"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=477&id=788%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-nopember-2015&start=20 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=788%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-nopember-2015&start=20 R..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aP8J2ptaVkpBqq ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-11 16:22:29 (11 months ago)	[Sat Oct 11 21:02:14.059469 2025] [security2:error] [pid 2539855:tid 139973308180160] [client 36.85. ... show more [Sat Oct 11 21:02:14.059469 2025] [security2:error] [pid 2539855:tid 139973308180160] [client 36.85.217.247:3653] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=472&id=1189%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-25-oktober-2016-1-november-2016&start=110 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=472&id=1189%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-25-oktober-2016..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOpjZv7KfeqLO ... show less	Hacking Web App Attack
🇸🇰 GOVCERT	2025-08-04 20:09:27 (1 year ago)	Sweep Scan	Port Scan
🇨🇼 ATV	2023-02-21 00:40:54 (3 years ago)	Unsolicited connection attempts to ports 1433, 3306	Hacking
🇳🇱 EGP Abuse Dept	2021-02-27 04:06:26 (5 years ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 IrisFlower	2021-02-26 11:31:05 (5 years ago)	Unauthorized connection attempt detected from IP address 36.85.217.247 to port 23	Hacking
🇫🇷 security.rdmc.fr	2021-02-24 12:44:55 (5 years ago)	Automatic report - Port Scan Attack	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.4.169

🇰🇷 161.118.153.29

🇩🇪 159.223.26.113

🇨🇳 117.159.93.197

🇨🇳 58.144.223.69

🇬🇷 45.142.31.44

🇺🇸 2600:1f14:284e:d800:f902:b0f5:35e9:6a21

🇩🇪 213.209.159.25

🇧🇪 198.235.24.184

🇵🇱 176.53.159.197

🇮🇩 163.7.11.155

🇮🇩 163.7.1.156

🇵🇰 160.30.143.26

🇺🇸 132.148.75.9

🇨🇳 120.238.254.10

🇱🇹 62.60.130.242

🇷🇺 46.22.51.182

🇺🇸 35.148.218.141

🇩🇪 185.250.250.169

🇫🇮 178.20.210.173