This IP address has been reported a total of
14
times from
11 distinct
sources.
36.68.139.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-31T22:12:26.788369 pclab24.pl sshd[3107684]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-07-31T22:12:26.788369 pclab24.pl sshd[3107684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.139.149
2026-07-31T22:12:28.312967 pclab24.pl sshd[3107684]: Failed password for invalid user tunnel from 36.68.139.149 port 39230 ssh2
2026-07-31T22:16:43.975974 pclab24.pl sshd[3109567]: Connection from 36.68.139.149 port 33156 on 10.10.0.5 port 22
2026-07-31T22:16:45.261304 pclab24.pl sshd[3109567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.139.149 user=root
2026-07-31T22:16:47.342507 pclab24.pl sshd[3109567]: Failed password for root from 36.68.139.149 port 33156 ssh2
...
show less
2026-07-31T21:58:44.542368+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[654143]: Disconnected fro ...
show more2026-07-31T21:58:44.542368+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[654143]: Disconnected from invalid user administrator 36.68.139.149 port 39285 [preauth]
2026-07-31T22:03:02.663459+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[655266]: Disconnected from authenticating user root 36.68.139.149 port 50092 [preauth]
2026-07-31T22:07:32.819133+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[656332]: Connection reset by 36.68.139.149 port 56587 [preauth]
2026-07-31T22:11:39.065138+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[657383]: Invalid user tunnel from 36.68.139.149 port 23177
2026-07-31T22:11:39.302320+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[657383]: Disconnected from invalid user tunnel 36.68.139.149 port 23177 [preauth]
show less
Jul 31 16:40:12 wslbvm01 sshd[88488]: Failed password for invalid user rasel from 36.68.139.149 port ...
show moreJul 31 16:40:12 wslbvm01 sshd[88488]: Failed password for invalid user rasel from 36.68.139.149 port 33980 ssh2
Jul 31 16:49:41 wslbvm01 sshd[90799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.68.139.149 user=root
Jul 31 16:49:43 wslbvm01 sshd[90799]: Failed password for root from 36.68.139.149 port 47145 ssh2
...
show less
SSH Brute force: 1 attempts were recorded from 36.68.139.149
2026-07-31T21:41:19+02:00 Invalid user ...
show moreSSH Brute force: 1 attempts were recorded from 36.68.139.149
2026-07-31T21:41:19+02:00 Invalid user rasel from 36.68.139.149 port 39425
show less
2026-07-31T21:12:39.958515+02:00 helmgartner sshd[1931976]: Invalid user yura from 36.68.139.149 por ...
show more2026-07-31T21:12:39.958515+02:00 helmgartner sshd[1931976]: Invalid user yura from 36.68.139.149 port 52125
2026-07-31T21:17:54.015648+02:00 helmgartner sshd[1932541]: User root from 36.68.139.149 not allowed because not listed in AllowUsers
2026-07-31T21:23:08.419414+02:00 helmgartner sshd[1933079]: User root from 36.68.139.149 not allowed because not listed in AllowUsers
...
show less
2026-07-31T19:00:34.282921+02:00 helmgartner sshd[1918592]: Invalid user stp from 36.68.139.149 port ...
show more2026-07-31T19:00:34.282921+02:00 helmgartner sshd[1918592]: Invalid user stp from 36.68.139.149 port 57606
2026-07-31T19:05:35.968578+02:00 helmgartner sshd[1919062]: User root from 36.68.139.149 not allowed because not listed in AllowUsers
2026-07-31T19:10:27.631543+02:00 helmgartner sshd[1919636]: Invalid user yangh from 36.68.139.149 port 38354
...
show less
2026-07-31T15:42:21.733503+00:00 storage.andrewa.co.uk sshd-session[2079187]: Invalid user admin fro ...
show more2026-07-31T15:42:21.733503+00:00 storage.andrewa.co.uk sshd-session[2079187]: Invalid user admin from 36.68.139.149 port 38583
2026-07-31T15:57:06.794737+00:00 storage.andrewa.co.uk sshd-session[2098394]: Invalid user ela from 36.68.139.149 port 38849
2026-07-31T16:26:24.798746+00:00 storage.andrewa.co.uk sshd-session[2136968]: Invalid user xoxo from 36.68.139.149 port 34456
...
show less
2026-07-31T17:47:53.427610+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[2805267]: Invalid user songzhu ...
show more2026-07-31T17:47:53.427610+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[2805267]: Invalid user songzhu from 36.68.139.149 port 28187
2026-07-31T17:52:44.773091+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[2806667]: Invalid user elk from 36.68.139.149 port 30464
2026-07-31T17:57:40.695364+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[2808017]: Invalid user ela from 36.68.139.149 port 28056
...
show less
2026-07-31T17:46:54.725258+02:00 helmgartner sshd[1911219]: Invalid user songzhu from 36.68.139.149 ...
show more2026-07-31T17:46:54.725258+02:00 helmgartner sshd[1911219]: Invalid user songzhu from 36.68.139.149 port 28206
2026-07-31T17:51:44.503658+02:00 helmgartner sshd[1911699]: Invalid user elk from 36.68.139.149 port 47993
2026-07-31T17:56:38.252944+02:00 helmgartner sshd[1912155]: Invalid user ela from 36.68.139.149 port 21494
...
show less
2026-07-31T16:00:12.378416+02:00 hvs sshd[681]: Timeout before authentication for connection from 36 ...
show more2026-07-31T16:00:12.378416+02:00 hvs sshd[681]: Timeout before authentication for connection from 36.68.139.149 to 93.123.85.42, pid = 119928
2026-07-31T16:06:52.452396+02:00 hvs sshd-session[120140]: Disconnected from authenticating user root 36.68.139.149 port 23915 [preauth]
2026-07-31T16:11:12.884427+02:00 hvs sshd-session[120184]: Disconnected from authenticating user root 36.68.139.149 port 43196 [preauth]
2026-07-31T16:19:57.463456+02:00 hvs sshd-session[120274]: Disconnected from authenticating user root 36.68.139.149 port 49999 [preauth]
2026-07-31T17:00:31.912919+02:00 hvs sshd[681]: Timeout before authentication for connection from 36.68.139.149 to 93.123.85.42, pid = 120664
...
show less
Brute-Force
SSH
Anonymous
2026-07-31T15:23:39.234960+02:00 hvs sshd-session[119503]: Invalid user g9q7jreo from 36.68.139.149 ...
show more2026-07-31T15:23:39.234960+02:00 hvs sshd-session[119503]: Invalid user g9q7jreo from 36.68.139.149 port 57409
2026-07-31T15:23:39.431705+02:00 hvs sshd-session[119503]: Disconnected from invalid user g9q7jreo 36.68.139.149 port 57409 [preauth]
2026-07-31T15:32:22.886991+02:00 hvs sshd-session[119601]: Invalid user rebecca from 36.68.139.149 port 29000
2026-07-31T15:32:23.077280+02:00 hvs sshd-session[119601]: Disconnected from invalid user rebecca 36.68.139.149 port 29000 [preauth]
2026-07-31T15:40:52.943345+02:00 hvs sshd-session[119690]: Disconnected from authenticating user root 36.68.139.149 port 45809 [preauth]
...
show less
2026-07-31T15:22:17.776303+02:00 ariane-Precision-Tower-5810 sshd[173638]: Invalid user g9q7jreo fro ...
show more2026-07-31T15:22:17.776303+02:00 ariane-Precision-Tower-5810 sshd[173638]: Invalid user g9q7jreo from 36.68.139.149 port 34979
...
show less
Brute-Force
SSH
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩