This IP address has been reported a total of
217
times from
146 distinct
sources.
36.139.161.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 12 17:30:27 proxy-03 sshd[497686]: Failed password for invalid user admin from 36.139.161.140 po ...
show moreJul 12 17:30:27 proxy-03 sshd[497686]: Failed password for invalid user admin from 36.139.161.140 port 60418 ssh2
Jul 12 17:34:05 proxy-03 sshd[502553]: Invalid user test from 36.139.161.140 port 45740
Jul 12 17:34:05 proxy-03 sshd[502553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.139.161.140
Jul 12 17:34:07 proxy-03 sshd[502553]: Failed password for invalid user test from 36.139.161.140 port 45740 ssh2
Jul 12 17:34:57 proxy-03 sshd[503712]: Invalid user elastic from 36.139.161.140 port 58434
...
show less
2026-07-13T03:41:13.835350+08:00 vmi996132.contaboserver.net sshd[889620]: pam_unix(sshd:auth): auth ...
show more2026-07-13T03:41:13.835350+08:00 vmi996132.contaboserver.net sshd[889620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.139.161.140
2026-07-13T03:41:15.475710+08:00 vmi996132.contaboserver.net sshd[889620]: Failed password for invalid user daniel from 36.139.161.140 port 47022 ssh2
2026-07-13T03:41:16.301129+08:00 vmi996132.contaboserver.net sshd[889620]: Disconnected from invalid user daniel 36.139.161.140 port 47022 [preauth]
...
show less
2026-07-12T13:29:47.163988-04:00 debianOptiplex sshd[813784]: Invalid user dmdba from 36.139.161.140 ...
show more2026-07-12T13:29:47.163988-04:00 debianOptiplex sshd[813784]: Invalid user dmdba from 36.139.161.140 port 36748
2026-07-12T13:30:47.421708-04:00 debianOptiplex sshd[813935]: Invalid user ethan from 36.139.161.140 port 50008
2026-07-12T13:32:42.329950-04:00 debianOptiplex sshd[814264]: Invalid user shoply from 36.139.161.140 port 48246
2026-07-12T13:39:16.944104-04:00 debianOptiplex sshd[815289]: Invalid user home from 36.139.161.140 port 56130
2026-07-12T13:40:11.850651-04:00 debianOptiplex sshd[815437]: Invalid user firewall from 36.139.161.140 port 41114
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: home, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: paul, Pass: [REDACTED]
2026-07-12T13:11:14.887208-04:00 debianOptiplex sshd[810837]: Invalid user hafiz from 36.139.161.140 ...
show more2026-07-12T13:11:14.887208-04:00 debianOptiplex sshd[810837]: Invalid user hafiz from 36.139.161.140 port 54510
2026-07-12T13:12:09.819065-04:00 debianOptiplex sshd[810983]: Invalid user jason from 36.139.161.140 port 39510
2026-07-12T13:13:03.585446-04:00 debianOptiplex sshd[811160]: Invalid user coco from 36.139.161.140 port 52720
2026-07-12T13:14:53.804195-04:00 debianOptiplex sshd[811461]: Invalid user agent from 36.139.161.140 port 50950
2026-07-12T13:18:35.423402-04:00 debianOptiplex sshd[812027]: Invalid user bitwarden from 36.139.161.140 port 47372
...
show less
Multiple SSH login attempts from 36.139.161.140 targeting user(s): hafiz,root | Server Managed by Fo ...
show moreMultiple SSH login attempts from 36.139.161.140 targeting user(s): hafiz,root | Server Managed by Focusnic
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-07-12T18:13:50.757959+02:00 redcrowdev sshd[4004758]: Failed password for postgres from 36.139. ...
show more2026-07-12T18:13:50.757959+02:00 redcrowdev sshd[4004758]: Failed password for postgres from 36.139.161.140 port 44622 ssh2
2026-07-12T18:14:50.280835+02:00 redcrowdev sshd[4004765]: Invalid user mysql2 from 36.139.161.140 port 57154
2026-07-12T18:14:50.287236+02:00 redcrowdev sshd[4004765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.139.161.140
2026-07-12T18:14:51.955816+02:00 redcrowdev sshd[4004765]: Failed password for invalid user mysql2 from 36.139.161.140 port 57154 ssh2
2026-07-12T18:15:53.271365+02:00 redcrowdev sshd[4004780]: Invalid user front from 36.139.161.140 port 41492
...
show less
Brute-Force
SSH
Showing 1 to
15
of 217 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩