This IP address has been reported a total of
126
times from
109 distinct
sources.
35.205.190.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 37
reports;
United States of America
with 22
reports;
France
with 12
reports.
The most common categories in these recent reports were:
SSH
112
times;
Brute-Force
108
times;
Port Scan
19
times;
Hacking
10
times;
DDoS Attack
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[bas-9] SSH brute-force: 6 failed sshd authentication attempt(s) from 35.205.190.52 on port 22 (auto ...
show more[bas-9] SSH brute-force: 6 failed sshd authentication attempt(s) from 35.205.190.52 on port 22 (automated sensor)
show less
This IP address carried out 10 port scanning attempts on 01-10-2026. For more information or to repo ...
show moreThis IP address carried out 10 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
[bas-9] SSH brute-force: 6 failed sshd authentication attempt(s) from 35.205.190.52 on port 22 (auto ...
show more[bas-9] SSH brute-force: 6 failed sshd authentication attempt(s) from 35.205.190.52 on port 22 (automated sensor)
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ch1) over 2026-10-01..2026-10-01. Reported by an SSH honeypot network; no production service involved.
show less
2026-10-01T09:11:27.424493+02:00 mail.gwyll.eu sshd-session[1717778]: Unable to negotiate with 35.20 ...
show more2026-10-01T09:11:27.424493+02:00 mail.gwyll.eu sshd-session[1717778]: Unable to negotiate with 35.205.190.52 port 53448: no matching host key type found. Their offer: ssh-dss [preauth]
2026-10-01T09:11:27.692674+02:00 mail.gwyll.eu sshd-session[1717782]: Unable to negotiate with 35.205.190.52 port 53460: no matching host key type found. Their offer: ssh-rsa [preauth]
2026-10-01T09:11:27.951354+02:00 mail.gwyll.eu sshd-session[1717786]: Unable to negotiate with 35.205.190.52 port 53472: no matching MAC found. Their offer: hmac-md5,hmac-sha1,hmac-ripemd160 [preauth]
...
show less
Fail2Ban automatic report:
SSH brute-force:
Oct 1 09:10:47 serw sshd[1574162]: Unable to negotiate ...
show moreFail2Ban automatic report:
SSH brute-force:
Oct 1 09:10:47 serw sshd[1574162]: Unable to negotiate with 35.205.190.52 port 49568: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
Oct 1 09:10:57 serw sshd[1574165]: Unable to negotiate with 35.205.190.52 port 42728: no matching host key type found. Their offer: ssh-dss [preauth]
Oct 1 09:10:57 serw sshd[1574167]: Connection closed by 35.205.190.52 port 42740 [preauth]
show less
