Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-07T06:20:16.343715+00:00 helium sshd-session[981400]: Unable to negotiate with 35.206.134.181 port 53730: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256 ...
show more2026-11-07T06:20:16.343715+00:00 helium sshd-session[981400]: Unable to negotiate with 35.206.134.181 port 53730: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-11-07T06:20:16.597994+00:00 helium sshd-session[981402]: Unable to negotiate with 35.206.134.181 port 53742: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-11-07T06:20:16.856573+00:00 helium sshd-session[981404]: Unable to negotiate with 35.206.134.181 port 53756: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-
...
show less
SSH brute-force attempt from 35.206.134.181 blocked by Chicago. 2026-11-06T23:17:59.115638-07:00 honk sshd[2112200]: Connection closed by invalid user admin 35.206.134.181 port 11950 [preauth]
2026-11-06T23:17:58.039333-07:00 honk sshd[2112197]: Conn ...
show moreSSH brute-force attempt from 35.206.134.181 blocked by Chicago. 2026-11-06T23:17:59.115638-07:00 honk sshd[2112200]: Connection closed by invalid user admin 35.206.134.181 port 11950 [preauth]
2026-11-06T23:17:58.039333-07:00 honk sshd[2112197]: Connection from 35.206.134.181 port 11938 on 10.0.0.204 port 22 rdomain ""
2026-11-06T23:18:02.388266-07:00 honk sshd[2112197]: Connection closed by 35.206.134.181 port 11938 [preauth]
show less
2026-11-06T23:14:14.628749-07:00 localhost sshd[3535241]: Connection closed by 35.206.134.181 port 34958
2026-11-06T23:14:33.011530-07:00 localhost sshd[3535257]: Invalid user lzfhl from 35.206.134.181 port 52994
2026-11-06T23:14:33.114540-07:00 loca ...
show more2026-11-06T23:14:14.628749-07:00 localhost sshd[3535241]: Connection closed by 35.206.134.181 port 34958
2026-11-06T23:14:33.011530-07:00 localhost sshd[3535257]: Invalid user lzfhl from 35.206.134.181 port 52994
2026-11-06T23:14:33.114540-07:00 localhost sshd[3535257]: Connection closed by invalid user lzfhl 35.206.134.181 port 52994 [preauth]
2026-11-06T23:14:46.811229-07:00 localhost sshd[3535260]: Unable to negotiate with 35.206.134.181 port 20232: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
...
show less
Nov 7 08:11:37 vargan sshd-session[1808]: Invalid user admin from 35.206.134.181 port 26182
Nov 7 08:11:37 vargan sshd-session[1808]: error: PAM: Authentication error for illegal user admin from 181.134.206.35.bc.googleusercontent.com
Nov 7 08:11: ...
show moreNov 7 08:11:37 vargan sshd-session[1808]: Invalid user admin from 35.206.134.181 port 26182
Nov 7 08:11:37 vargan sshd-session[1808]: error: PAM: Authentication error for illegal user admin from 181.134.206.35.bc.googleusercontent.com
Nov 7 08:11:37 vargan sshd-session[1808]: Failed keyboard-interactive/pam for invalid user admin from 35.206.134.181 port 26182 ssh2
Nov 7 08:11:37 vargan sshd-session[1808]: Connection closed by invalid user admin 35.206.134.181 port 26182 [preauth]
Nov 7 08:11:41 vargan sshd-session[1806]: Connection closed by 35.206.134.181 port 26174 [preauth]
...
show less
SSH brute-force: 3 failed attempts. Banned 24h by fail2ban [sshd-ddos]. Log evidence, own hostname redacted: sshd[26273]: Invalid user admin from 35.206.134.181 port 56220 | sshd[26273]: Connection closed by invalid user admin 35.206.134.181 port 562 ...
show moreSSH brute-force: 3 failed attempts. Banned 24h by fail2ban [sshd-ddos]. Log evidence, own hostname redacted: sshd[26273]: Invalid user admin from 35.206.134.181 port 56220 | sshd[26273]: Connection closed by invalid user admin 35.206.134.181 port 56220 [preauth] | sshd[26271]: Connection closed by 35.206.134.181 port 56206 [preauth]
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown