36.64.131.68
On the shared blocklist: servers in the shieldie network block it.
Ban ends: Nov 14, 2026, 4:57 PM UTC
- Attack types
sshd- First reported
- Oct 6, 2026, 10:28 AM UTC
- Last reported
- Nov 12, 2026, 12:57 AM UTC
- Network
- AS7713 Telekomunikasi Indonesia (PT)
- Location
- Indonesia
Attacks by type
| Attack type | Incidents |
|---|---|
sshd | 11 |
Incidents by severity: Critical 1, Medium 1, Low 9
Incidents
These incidents come from 3 different servers. Each describes only its own history with this address, so a first ban on one can be a repeat ban on another.
sshdServer 1CriticalAI verdict: malicious15 hitsNov 12, 2026, 12:53 AM UTCsshdServer 1LowAI verdict: malicious5 hitsNov 5, 2026, 3:11 PM UTCPersistent recidivist 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (6 prior bans in the recidive window), consistent with untargeted automated brute-force noise; shieldie-guard has already applied a 230400s firewall ban.
sshdServer 1LowAI verdict: malicious1 hitOct 29, 2026, 4:25 PM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (7th ban, 6 prior in recidive window), now under a 230400s firewall ban; consistent with automated brute-force noise, not a targeted attack.
sshdServer 2LowAI verdict: malicious1 hitOct 27, 2026, 5:44 PM UTCRepeat SSH brute-force from 36.64.131.68 (2nd ban; 1 prior ban in recidive window, refused attempts included) tripped shieldie-guard's sshd jail, which applied a 7200s firewall ban; persistent but consistent with opportunistic automated scanning rather than a targeted attack.
sshdServer 1LowAI verdict: malicious1 hitOct 26, 2026, 1:35 AM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (6th ban, 5 prior in recidive window), now under a 115200s firewall ban; consistent with automated brute-force noise, not evidence of a targeted attack or successful login.
sshdServer 1LowAI verdict: malicious1 hitOct 18, 2026, 5:24 AM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (5th ban, 4 prior in recidive window); consistent with automated brute-force noise rather than a targeted attack, already contained by a 57600s firewall ban.
sshdServer 1LowAI verdict: malicious1 hitOct 15, 2026, 7:23 AM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (6th ban; 5 prior in the recidive window). This looks like automated brute-force noise, not a targeted attack, and shieldie-guard already applied a 115200s firewall ban.
sshdServer 2LowAI verdict: malicious1 hitOct 13, 2026, 4:51 PM UTCRepeated SSH auth failures from 36.64.131.68 tripped shieldie-guard's sshd jail, which applied a 3600s firewall ban; no prior bans in the recidive window, consistent with opportunistic internet-wide SSH scanning rather than a targeted attack.
sshdServer 3MediumAI verdict: malicious1 hitOct 13, 2026, 4:49 PM UTCRecidivist source 36.64.131.68 (1 prior ban in the recidive window, incl. the 2026-10-08 incident; refused attempts included) resumed repeated SSH auth failures and shieldie-guard's 'sshd' jail applied an escalated 7200s nftables ban — persistent automated brute-force, no evidence of targeting or successful login.
sshdServer 1LowAI verdict: malicious1 hitOct 12, 2026, 5:06 PM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (5th ban; 4 prior in the recidive window, refused attempts included); this is consistent with automated brute-force noise rather than a targeted attack, and shieldie-guard has already applied a 57600s ban.
sshdServer 1LowAI verdict: malicious1 hitOct 12, 2026, 5:53 AM UTCPersistent repeat offender 36.64.131.68 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (4th ban; 3 prior in the recidive window, refused attempts included). This looks like opportunistic brute-force noise, not a targeted attack, and shieldie-guard applied a 28800s firewall ban.
Timeline
- Nov 12, 2026, 12:57 AM UTCLast reported
- Nov 12, 2026, 12:53 AM UTC
sshdCritical - Nov 5, 2026, 3:11 PM UTC
sshdLow - Oct 29, 2026, 4:25 PM UTC
sshdLow - Oct 27, 2026, 5:44 PM UTC
sshdLow - Oct 26, 2026, 1:35 AM UTC
sshdLow - Oct 18, 2026, 5:24 AM UTC
sshdLow - Oct 15, 2026, 7:23 AM UTC
sshdLow - Oct 13, 2026, 4:51 PM UTC
sshdLow - Oct 13, 2026, 4:49 PM UTC
sshdMedium - Oct 12, 2026, 5:06 PM UTC
sshdLow - Oct 12, 2026, 5:53 AM UTC
sshdLow - Oct 6, 2026, 10:28 AM UTCFirst reported
Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.