This IP address has been reported a total of
1,049
times from
166 distinct
sources.
68.235.52.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-08T22:07:32.000208+01:00 [redacted] sshd[2130474]: Disconnected from authenticating user roo ...
show more2026-05-08T22:07:32.000208+01:00 [redacted] sshd[2130474]: Disconnected from authenticating user root 68.235.52.99 port 18986 [preauth]
2026-05-08T22:33:02.645182+01:00 [redacted] sshd[2130661]: Disconnecte
...
show less
2026-05-08T18:54:47.064667+00:00 thecount sshd[55667]: Disconnected from authenticating user root 68 ...
show more2026-05-08T18:54:47.064667+00:00 thecount sshd[55667]: Disconnected from authenticating user root 68.235.52.99 port 25616 [preauth]
...
show less
2026-05-08T17:50:40.319685+00:00 thelemmy.club sshd-session[1624910]: Received disconnect from 68.23 ...
show more2026-05-08T17:50:40.319685+00:00 thelemmy.club sshd-session[1624910]: Received disconnect from 68.235.52.99 port 41392:11: disconnected by user [preauth]
2026-05-08T17:50:40.319716+00:00 thelemmy.club sshd-session[1624910]: Disconnected from invalid user root 68.235.52.99 port 41392 [preauth]
...
show less
2026-05-08T17:03:01.787352+00:00 mail sshd[44980]: Disconnected from authenticating user root 68.235 ...
show more2026-05-08T17:03:01.787352+00:00 mail sshd[44980]: Disconnected from authenticating user root 68.235.52.99 port 5226 [preauth]
2026-05-08T17:07:31.999086+00:00 mail sshd[45095]: Disconnected from authenticating user root 68.235.52.99 port 40974 [preauth]
...
show less
2026-05-09T00:57:33.394596+09:00 no3 sshd[803636]: Disconnected from authenticating user root 68.235 ...
show more2026-05-09T00:57:33.394596+09:00 no3 sshd[803636]: Disconnected from authenticating user root 68.235.52.99 port 29096 [preauth]
...
show less
May 8 15:57:25 hecnet-us-east-gw sshd[313253]: User root from 68.235.52.99 not allowed because not ...
show moreMay 8 15:57:25 hecnet-us-east-gw sshd[313253]: User root from 68.235.52.99 not allowed because not listed in AllowUsers
May 8 15:57:27 hecnet-us-east-gw sshd[313253]: Failed none for invalid user root from 68.235.52.99 port 41292 ssh2
May 8 15:57:29 hecnet-us-east-gw sshd[313253]: Disconnected from invalid user root 68.235.52.99 port 41292 [preauth]
...
show less
2026-05-09T00:42:14.013620+09:00 no6 sshd[158054]: Disconnected from authenticating user root 68.235 ...
show more2026-05-09T00:42:14.013620+09:00 no6 sshd[158054]: Disconnected from authenticating user root 68.235.52.99 port 62210 [preauth]
...
show less
May 8 00:18:30 koppa sshd[1091460]: User root from 68.235.52.99 not allowed because none of user's ...
show moreMay 8 00:18:30 koppa sshd[1091460]: User root from 68.235.52.99 not allowed because none of user's groups are listed in AllowGroups
May 8 06:23:43 koppa sshd[1096442]: User root from 68.235.52.99 not allowed because none of user's groups are listed in AllowGroups
May 8 09:24:05 koppa sshd[1098590]: User root from 68.235.52.99 not allowed because none of user's groups are listed in AllowGroups
...
show less
Brute-Force
SSH
Showing 916 to
930
of 1049 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩