This IP address has been reported a total of
43
times from
43 distinct
sources.
35.95.103.254 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 18 18:47:11 excalibur sshd[61020]: Connection closed by 35.95.103.254 port 53342 [preauth]
Sep 1 ...
show moreSep 18 18:47:11 excalibur sshd[61020]: Connection closed by 35.95.103.254 port 53342 [preauth]
Sep 18 18:47:12 excalibur sshd[61122]: Connection closed by 35.95.103.254 port 53354 [preauth]
Sep 18 18:47:13 excalibur sshd[61198]: Unable to negotiate with 35.95.103.254 port 53370: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ...
show moreHoneypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-09-18T16:45:49.156Z ACCEPT host=::ffff:35.95.103.254 port=51810 fd=4 n=3/4096
...
show less
Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypo ...
show moreHoneypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor.
show less
SSH brute-force attempt from 35.95.103.254 blocked by LasVegas. 2026-09-18T09:36:42.101409 UR702 ssh ...
show moreSSH brute-force attempt from 35.95.103.254 blocked by LasVegas. 2026-09-18T09:36:42.101409 UR702 sshd-session[637748]: Connection closed by 35.95.103.254 port 50644 [preauth]
2026-09-18T09:36:42.135872 UR702 sshd-session[637750]: Connection from 35.95.103.254 port 50660 on 158.51.124.175 port 22 rdomain ""
2026-09-18T09:36:42.809364 UR702 sshd-session[637750]: Unable to negotiate with 35.95.103.254 port 50660: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
Automated report: 4 SSH authentication failure events observed during the last 15 minutes against TC ...
show moreAutomated report: 4 SSH authentication failure events observed during the last 15 minutes against TCP port 22.
show less
2026-09-18T17:28:43.008398+02:00 ka02 sshd-session[874519]: Unable to negotiate with 35.95.103.254 p ...
show more2026-09-18T17:28:43.008398+02:00 ka02 sshd-session[874519]: Unable to negotiate with 35.95.103.254 port 39308: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-09-18T17:28:43.306262+02:00 ka02 sshd-session[874521]: Connection from 35.95.103.254 port 39314 on 46.38.234.197 port 22 rdomain ""
2026-09-18T17:28:43.707415+02:00 ka02 sshd-session[874521]: Unable to negotiate with 35.95.103.254 port 39314: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-09-18T17:28:43.974377+02:00 ka02 sshd-session[874524]: Connection from 35.95.103.254 port 39328 on 46.38.234.197 port 22 rdomain ""
2026-09-18T17:28:45.027222+02:00 ka02 sshd-session[874524]: Connection closed by 35.95.103.254 port 39328 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Sep 18 16:27:26 conf sshd[379622]: Unable to negotiate with 35.95.103.254 port 45094: no matching ho ...
show moreSep 18 16:27:26 conf sshd[379622]: Unable to negotiate with 35.95.103.254 port 45094: no matching host key type found. Their offer: ecdsa-sha2-nistp256,[email protected] [preauth]
Sep 18 16:27:26 conf sshd[379624]: Connection from 35.95.103.254 port 45110 on 79.137.33.6 port 22 rdomain ""
Sep 18 16:27:27 conf sshd[379624]: Unable to negotiate with 35.95.103.254 port 45110: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
2026-09-18 15:16:31 connection from 35.95.103.254
2026-09-18 15:16:32 connection from 35.95.103.254
...
show more2026-09-18 15:16:31 connection from 35.95.103.254
2026-09-18 15:16:32 connection from 35.95.103.254
2026-09-18 15:16:33 connection from 35.95.103.254
2026-09-18 15:16:33 connection from 35.95.103.254
2026-09-18 15:16:34 connection from 35.95.103.254
...
show less
2026-09-18T17:08:01.189860+02:00 wels sshd[1578381]: Connection closed by 35.95.103.254 port 60012 [ ...
show more2026-09-18T17:08:01.189860+02:00 wels sshd[1578381]: Connection closed by 35.95.103.254 port 60012 [preauth]
2026-09-18T17:08:01.731293+02:00 wels sshd[1578383]: Unable to negotiate with 35.95.103.254 port 60014: no matching host key type found. Their offer: ecdsa-sha2-nistp256,[email protected] [preauth]
2026-09-18T17:08:02.743807+02:00 wels sshd[1578385]: Unable to negotiate with 35.95.103.254 port 60028: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
SSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dro ...
show moreSSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dropped by iptables. Raw audit:
Manual audit command trigger
show less