JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 36.94.246.201

36.94.246.201 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 72%: ?

72%

ISP	PT Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Palembang, South Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 36.94.246.201

Whois 36.94.246.201

IP Abuse Reports for 36.94.246.201:

This IP address has been reported a total of 93 times from 50 distinct sources. 36.94.246.201 was first reported on September 12th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BIV	2026-06-07 03:15:19 (4 hours ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:Dionaea,tpot:P0f,tpot:Suricata. Ports: 1433. Aut ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:Dionaea,tpot:P0f,tpot:Suricata. Ports: 1433. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇫🇮 6kilowatti	2026-06-06 09:35:24 (22 hours ago)	2026-06-06T12:35:23.063211+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-06T12:35:23.063211+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=36.94.246.201 DST=83.148.240.21 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=9644 DF PROTO=TCP SPT=52157 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 ByeByte API	2026-06-06 06:12:49 (1 day ago)	byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-06-06T06:12:49Z. Source port 52520. TCP ... show more byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-06-06T06:12:49Z. Source port 52520. TCP flags: SYN. Packet: 52B, TTL 119, window 8192, IP id 15648. Single packet, dropped at firewall. p0f: OS Windows 7 or 8 (exact match), 9 hops, link Ethernet or modem. show less	Port Scan
🇳🇱 ByeByte API	2026-06-06 06:12:49 (1 day ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 2026-06-06 06:12 UTC. show less	Port Scan
🇫🇷 ✨	2026-06-05 01:54:07 (2 days ago)	Rule : Security Rule: Security Event: Security 0 - %592 36.94.246.201 51857 77.90.37.147 1433 6 S ... show more Rule : Security Rule: Security Event: Security 0 - %592 36.94.246.201 51857 77.90.37.147 1433 6 Stealth 240164 %597 13 show less	Port Scan Hacking Brute-Force
🇳🇴 tmiland	2026-06-02 13:09:25 (4 days ago)	Suricata Detected 14 attacks from 36.94.246.201.; ET SCAN Suspicious inbound to MSSQL port 1433; IP: ... show more Suricata Detected 14 attacks from 36.94.246.201.; ET SCAN Suspicious inbound to MSSQL port 1433; IP: 36.94.246.201; Ports: 59713; Direction: to_server; Trigger: SCAN; Category: Potentially Bad Traffic; Severity: 2 show less	Port Scan
🇵🇱 Yachiyo Runami	2026-06-01 04:05:30 (6 days ago)	Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 113 \| Len: 52B \| W ... show more Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 113 \| Len: 52B \| Win: 8192(1) \| F2B/ufw-honeypot@2026-06-01T04:05:29Z show less	Port Scan Hacking
🇳🇱 COMPLEX	2026-05-30 04:11:17 (1 week ago)	Unsolicited TCP traffic \| Action: DROP \| Port 1433	Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-27 06:06:38 (1 week ago)	Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password	Brute-Force
🇳🇱 ByeByte API	2026-05-25 16:06:23 (1 week ago)	byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-05-25T16:06:22Z. Source port 50731. TCP ... show more byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-05-25T16:06:22Z. Source port 50731. TCP flags: SYN. Packet: 52B, TTL 119, window 8192, IP id 29950. Single packet, dropped at firewall. p0f: OS Windows 7 or 8 (exact match), 9 hops, link Ethernet or modem. show less	Port Scan
🇳🇱 ByeByte API	2026-05-25 16:06:22 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 2026-05-25 16:06 UTC. show less	Port Scan
🇦🇹 urnilxfgbez	2026-05-21 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 Domainhizmetleri.com	2026-05-17 14:31:13 (2 weeks ago)	[honeypot] - MS-SQL	Port Scan SQL Injection Brute-Force
🇱🇹 NotACaptcha	2026-05-11 08:56:29 (3 weeks ago)	Unauthorised access (May 11 11:56) SRC=36.94.246.201 LEN=52 TTL=117 ID=9711 DF TCP DPT=1433 WINDOW=8 ... show more Unauthorised access (May 11 11:56) SRC=36.94.246.201 LEN=52 TTL=117 ID=9711 DF TCP DPT=1433 WINDOW=8192 SYN show less	Port Scan
🇨🇿 kronos	2026-05-09 02:18:19 (4 weeks ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:452 \| alerts5m:452	Port Scan

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.195

🇨🇳 180.76.104.208

🇺🇸 162.216.150.194

🇺🇸 162.216.149.155

🇻🇳 160.30.113.59

🇫🇮 147.185.133.24

🇹🇭 125.27.11.184

🇨🇳 113.116.189.60

🇨🇳 111.162.147.29

🇮🇩 103.154.231.122

🇨🇳 58.144.223.69

🇩🇪 47.245.138.0

🇺🇸 208.64.168.48

🇺🇸 205.210.31.37

🇨🇳 175.5.92.176

🇧🇼 168.167.72.132

🇳🇱 160.119.71.12

🇺🇸 147.185.132.13

🇮🇳 103.176.255.195

🇮🇳 103.75.32.1