This IP address has been reported a total of
39
times from
39 distinct
sources.
138.68.52.36 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 8
reports;
France
with 5
reports.
The most common categories in these recent reports were:
SSH
34
times;
Brute-Force
29
times;
Port Scan
5
times;
Hacking
3
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-28T01:09:32.010674+01:00 swsrv sshd[2944035]: User root from 138.68.52.36 not allowed becaus ...
show more2026-10-28T01:09:32.010674+01:00 swsrv sshd[2944035]: User root from 138.68.52.36 not allowed because not listed in AllowUsers
2026-10-28T01:14:11.790473+01:00 swsrv sshd[2955017]: User root from 138.68.52.36 not allowed because not listed in AllowUsers
2026-10-28T01:18:37.885048+01:00 swsrv sshd[2966005]: Invalid user admin from 138.68.52.36 port 46822
2026-10-28T01:22:55.026962+01:00 swsrv sshd[2977000]: User root from 138.68.52.36 not allowed because not listed in AllowUsers
...
show less
2026-10-28T02:17:16.719425+02:00 frans sshd[30452]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-10-28T02:17:16.719425+02:00 frans sshd[30452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.36 user=root
2026-10-28T02:17:19.196827+02:00 frans sshd[30452]: Failed password for root from 138.68.52.36 port 48096 ssh2
2026-10-28T02:21:38.977112+02:00 frans sshd[31321]: Invalid user admin from 138.68.52.36 port 60878
...
show less
[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evide ...
show more[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Oct 28 00:17:09 emexpress sshd[88031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.36 user=root
Oct 28 00:17:12 emexpress sshd[88031]: Failed password for root from 138.68.52.36 port 46516 ssh2
Oct 28 00:21:32 emexpress sshd[88092]: Invalid user admin from 138.68.52.36 port 48002
show less
2026-10-28T02:16:26.460374+02:00 serv1.blumental-server.de sshd-session[3691292]: pam_unix(sshd:auth ...
show more2026-10-28T02:16:26.460374+02:00 serv1.blumental-server.de sshd-session[3691292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.36 user=root
2026-10-28T02:16:28.368250+02:00 serv1.blumental-server.de sshd-session[3691292]: Failed password for root from 138.68.52.36 port 46000 ssh2
2026-10-28T02:20:51.018736+02:00 serv1.blumental-server.de sshd-session[3692503]: Invalid user admin from 138.68.52.36 port 47812
...
show less
Oct 28 01:11:43 local sshd[20563]: Failed password for root from 138.68.52.36 port 40574 ssh2
Oct 28 ...
show moreOct 28 01:11:43 local sshd[20563]: Failed password for root from 138.68.52.36 port 40574 ssh2
Oct 28 01:16:11 local sshd[24070]: Failed password for root from 138.68.52.36 port 53114 ssh2
...
show less
2026-10-28T00:15:05.178569+00:00 edge-con-sin01.int.pdx.net.uk sshd[4167442]: pam_unix(sshd:auth): a ...
show more2026-10-28T00:15:05.178569+00:00 edge-con-sin01.int.pdx.net.uk sshd[4167442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.36 user=root
2026-10-28T00:15:06.795087+00:00 edge-con-sin01.int.pdx.net.uk sshd[4167442]: Failed password for root from 138.68.52.36 port 55040 ssh2
2026-10-28T00:19:27.480646+00:00 edge-con-sin01.int.pdx.net.uk sshd[4167975]: Invalid user admin from 138.68.52.36 port 48494
...
show less
