JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.90.149.249

36.90.149.249 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 53%: ?

53%

ISP	PT Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.90.149.249

Whois 36.90.149.249

IP Abuse Reports for 36.90.149.249:

This IP address has been reported a total of 12 times from 9 distinct sources. 36.90.149.249 was first reported on August 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-10-21 05:51:50 (1 day ago)	(wordpress) Failed wordpress login from 36.90.149.249 (ID/Indonesia/-)	Brute-Force
🇮🇹 VHosting	2026-10-21 05:30:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 gbutiri	2026-10-21 04:45:41 (1 day ago)	Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning ... show more Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot). show less	Web App Attack Bad Web Bot
Anonymous	2026-10-21 04:13:10 (1 day ago)	[redacted] 36.90.149.249 - - [21/Oct/2026:06:12:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 36.90.149.249 - - [21/Oct/2026:06:12:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.90.149.249 - - [21/Oct/2026:06:12:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 36.90.149.249 - - [21/Oct/2026:06:12:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 36.90.149.249 - - [21/Oct/2026:06:12:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 36.90.149.249 - - [21/Oct/2026:06:13:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" ... show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-10-21 03:12:31 (1 day ago)	3.775 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 LRob	2026-10-21 02:45:52 (1 day ago)	WordPress login brute force \| path: /xmlrpc.php \| ua: WordPress.com; https://wordpress.com, Jetpack ... show more WordPress login brute force \| path: /xmlrpc.php \| ua: WordPress.com; https://wordpress.com, Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1) \| 2026-10-21 02:45 UTC show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-10-21 01:10:13 (2 days ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Jetpack/12.1; WordPress/6.2; ht ... show more WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Jetpack/12.1; WordPress/6.2; http://site67800411.com show less	Web App Attack Hacking
🇺🇸 IndigoRidge	2026-10-20 08:11:39 (2 days ago)	36.90.149.249 - - [20/Oct/2026:04:08:37 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.c ... show more 36.90.149.249 - - [20/Oct/2026:04:08:37 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.com; https://wordpress.com" 36.90.149.249 - - [20/Oct/2026:04:10:02 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.com; https://wordpress.com" 36.90.149.249 - - [20/Oct/2026:04:11:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.com; https://wordpress.com" 36.90.149.249 - - [20/Oct/2026:04:11:27 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.com; https://wordpress.com" 36.90.149.249 - - [20/Oct/2026:04:11:39 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5931 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-10-20 01:24:06 (2 days ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇮🇩 RasyiidWho	2025-08-25 08:59:20 (1 year ago)	ip112.20 . 2025-08-25 15:59:19 6719 [Warning] Access denied for user 'root'@'36.90.149.249' (using p ... show more ip112.20 . 2025-08-25 15:59:19 6719 [Warning] Access denied for user 'root'@'36.90.149.249' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2025-08-23 04:51:06 (1 year ago)	ip112.20 . 2025-08-23 11:51:05 2971 [Warning] Access denied for user 'root'@'36.90.149.249' (using p ... show more ip112.20 . 2025-08-23 11:51:05 2971 [Warning] Access denied for user 'root'@'36.90.149.249' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2025-08-21 23:31:12 (1 year ago)	ip112.20 . 2025-08-22 6:31:11 522 [Warning] Access denied for user 'root'@'36.90.149.249' (using pa ... show more ip112.20 . 2025-08-22 6:31:11 522 [Warning] Access denied for user 'root'@'36.90.149.249' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.65

🇧🇷 205.210.31.200

🇸🇬 85.203.21.221

🇺🇸 65.49.20.122

🇲🇾 47.254.196.146

🇧🇪 34.52.212.128

🇳🇱 193.47.62.69

🇨🇳 182.38.126.38

🇨🇳 121.14.2.49

🇺🇸 71.6.134.231

🇨🇳 240e:341:1f0a:fd80:3d85:142c:12c6:f2ad

🇰🇷 220.80.223.144

🇳🇱 195.178.110.232

🇨🇳 183.220.200.2

🇮🇩 163.61.225.169

🇮🇳 122.165.56.162

🇨🇦 85.217.149.23

🇺🇸 84.32.212.89

🇳🇱 77.239.124.14

🇺🇸 54.87.72.71