JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.85.222.207

36.85.222.207 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 18%: ?

18%

ISP	PT TELKOM INDONESIA STO Gambir 3rd Floor Jl. Medan Merdeka Selatan No. 12 Jakarta 10110
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.net.id
Country	🇮🇩 Indonesia
City	Manado, North Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.85.222.207

Whois 36.85.222.207

IP Abuse Reports for 36.85.222.207:

This IP address has been reported a total of 14 times from 13 distinct sources. 36.85.222.207 was first reported on December 19th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 07:29:45 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 36.85.222.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 36.85.222.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 03:29:34.795730 2026] [security2:error] [pid 13153:tid 13153] [client 36.85.222.207:25257] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 36.85.222.207 (+1 hits since last alert)\|swinjury.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "swinjury.co"] [uri "/xmlrpc.php"] [unique_id "aoas3ukF9Na4WVlx2bgfjAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 04:56:57 (2 weeks ago)	36.85.222.207 - - [20/Aug/2026:06:56:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by W ... show more 36.85.222.207 - - [20/Aug/2026:06:56:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 36.85.222.207 - - [20/Aug/2026:06:56:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 36.85.222.207 - - [20/Aug/2026:06:56:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 36.85.222.207 - - [20/Aug/2026:06:56:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 36.85.222.207 - - [20/Aug/2026:06:56:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 02:13:59 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 36.85.222.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 36.85.222.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:13:45.246145 2026] [security2:error] [pid 8482:tid 8482] [client 36.85.222.207:32935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 36.85.222.207 (+1 hits since last alert)\|therealseska.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "therealseska.com"] [uri "/xmlrpc.php"] [unique_id "aoZi2aAX9qHIHMZYks6yCAAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-20 01:42:37 (2 weeks ago)	(wordpress) Failed wordpress login from 36.85.222.207 (ID/Indonesia/North Sulawesi/Manado/-)	Brute-Force
🇸🇬 mypatricks	2026-06-20 09:17:46 (2 months ago)	36.85.222.207 \| Port: 13911 \| DNS: 36.85.222.207 2026-06-20T17:17:45+08:00 Asia/Makassar \| FETCH Spr ... show more 36.85.222.207 \| Port: 13911 \| DNS: 36.85.222.207 2026-06-20T17:17:45+08:00 Asia/Makassar \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1754200869&dddafeffe8c8bdd=504 \| Ref: - \| Country: ID/Indonesia/+07:00 IP City: Manado a0e9ae6fef530884-SIN/Singapore, Singapore 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇳🇱 Study Bitcoin 🤗	2025-10-13 07:22:16 (10 months ago)	2 port probes: 2x tcp/1433 (microsoft-sql-server) [ros]	Port Scan SQL Injection
🇦🇷 RocketEmi	2025-10-08 15:22:45 (10 months ago)	High-volume distributed requests from multiple IPs	Bad Web Bot
Anonymous	2024-04-21 11:31:44 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇩 RasyiidWho	2023-05-04 00:53:07 (3 years ago)	ip112.20 . 2023-05-04 7:53:06 301920 [Warning] Access denied for user 'root'@'36.85.222.207' (using ... show more ip112.20 . 2023-05-04 7:53:06 301920 [Warning] Access denied for user 'root'@'36.85.222.207' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇨🇼 ATV	2023-02-08 00:40:59 (3 years ago)	Unsolicited connection attempts to ports 1433, 3306	Hacking
🇨🇳 ThreatBook.io	2022-12-05 17:34:21 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/36.85.222.207 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/36.85.222.207 2022-12-05 04:52:19 ["enable","system","shell","sh","cat /proc/mounts; /bin/busybox LCBEA"] show less	SSH
🇺🇸 sumnone	2022-12-04 16:44:40 (3 years ago)	Port probing on unauthorized port 8080	Port Scan Hacking Exploited Host
🇩🇪 sebaro11	2022-12-01 13:32:02 (3 years ago)	Portscan on 80/TCP blocked by UFW	Port Scan
🇫🇷 security.rdmc.fr	2020-12-19 12:49:39 (5 years ago)	Automatic report - Port Scan Attack	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.102

🇪🇸 194.164.161.16

🇯🇵 177.2.184.137

🇯🇵 172.105.208.132

🇺🇸 147.185.132.122

🇮🇳 122.187.226.237

🇺🇸 67.205.163.86

🇺🇸 64.62.156.115

🇦🇿 37.114.145.255

🇺🇸 205.210.31.70

🇳🇱 185.218.86.10

🇸🇬 165.154.200.214

🇺🇸 162.216.150.104

🇺🇸 147.185.132.115

🇺🇸 146.70.10.44

🇨🇳 111.26.67.36

🇭🇰 103.241.17.240

🇧🇬 91.191.209.198

🇩🇪 87.149.132.243

🇮🇳 49.205.214.47