This IP address has been reported a total of
56
times from
55 distinct
sources.
35.205.52.133 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 14
reports;
Germany
with 12
reports;
France
with 8
reports.
The most common categories in these recent reports were:
SSH
54
times;
Brute-Force
47
times;
Port Scan
7
times;
Hacking
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute force attack on port <port> (Fail2ban on mmo-at)
Brute-Force
SSH
Anonymous
2026-10-11T07:20:15.056452 localhost.localdomain sshd[3857719]: Invalid user uwoji from 35.205.52.13 ...
show more2026-10-11T07:20:15.056452 localhost.localdomain sshd[3857719]: Invalid user uwoji from 35.205.52.133 port 32876
...
show less
Oct 11 06:10:40 ucs sshd[26795]: error: PAM: User not known to the underlying authentication module ...
show moreOct 11 06:10:40 ucs sshd[26795]: error: PAM: User not known to the underlying authentication module for illegal user admin from 35.205.52.133
Oct 11 06:10:40 ucs sshd[26795]: Failed keyboard-interactive/pam for invalid user admin from 35.205.52.133 port 3546 ssh2
...
show less
Failed password for admin from 35.205.52.133 port 37414 ssh2
Connection closed by admin 35.205.52.13 ...
show moreFailed password for admin from 35.205.52.133 port 37414 ssh2
Connection closed by admin 35.205.52.133 port 37414 [preauth]
Connection closed by 35.205.52.133 port 37398 [preauth]
show less
2026-10-11T03:59:46.567891+00:00 relay-atl sshd-session[3404890]: Unable to negotiate with 35.205.52 ...
show more2026-10-11T03:59:46.567891+00:00 relay-atl sshd-session[3404890]: Unable to negotiate with 35.205.52.133 port 34158: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-10-11T03:59:46.929934+00:00 relay-atl sshd-session[3404892]: Unable to negotiate with 35.205.52.133 port 34172: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-10-11T03:59:47.311749+00:00 relay-atl sshd-session[3404894]: Unable to negotiate with 35.205.52.133 port 34188: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman
...
show less
2026-10-10T22:54:18.722241-05:00 whangaparaoa.com sshd-session[1023832]: pam_unix(sshd:auth): authen ...
show more2026-10-10T22:54:18.722241-05:00 whangaparaoa.com sshd-session[1023832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.205.52.133
2026-10-10T22:54:20.497863-05:00 whangaparaoa.com sshd-session[1023832]: Failed password for invalid user admin from 35.205.52.133 port 1074 ssh2
2026-10-10T22:54:23.917564-05:00 whangaparaoa.com sshd-session[1023832]: error: PAM: Authentication failure for illegal user admin from 35.205.52.133
2026-10-10T22:54:23.919425-05:00 whangaparaoa.com sshd-session[1023832]: Failed keyboard-interactive/pam for invalid user admin from 35.205.52.133 port 1074 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-11T05:53:56.829879+02:00 mail.gwyll.eu sshd-session[3923651]: Invalid user admin from 35.205 ...
show more2026-10-11T05:53:56.829879+02:00 mail.gwyll.eu sshd-session[3923651]: Invalid user admin from 35.205.52.133 port 55236
2026-10-11T05:53:56.858805+02:00 mail.gwyll.eu sshd-session[3923651]: Connection closed by invalid user admin 35.205.52.133 port 55236 [preauth]
2026-10-11T05:53:58.425921+02:00 mail.gwyll.eu sshd-session[3923647]: Connection closed by 35.205.52.133 port 55220 [preauth]
...
show less
SSH honeypot: logged in as 'admin'/'admin', no commands run
Brute-Force
SSH
Anonymous
2026-10-11T05:48:02.065553+02:00 baradur.es sshd-session[161235]: Invalid user admin from 35.205.52. ...
show more2026-10-11T05:48:02.065553+02:00 baradur.es sshd-session[161235]: Invalid user admin from 35.205.52.133 port 58430
2026-10-11T05:48:02.073141+02:00 baradur.es sshd-session[161235]: Connection closed by invalid user admin 35.205.52.133 port 58430 [preauth]
2026-10-11T05:48:06.114153+02:00 baradur.es sshd-session[161233]: Connection closed by 35.205.52.133 port 58424 [preauth]
...
show less
