This IP address has been reported a total of
4,069
times from
932 distinct
sources.
161.35.34.21 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute-force: 5 failed authentication attempts from this IP within 15 minutes. Detected by log an ...
show moreSSH brute-force: 5 failed authentication attempts from this IP within 15 minutes. Detected by log analysis on our server.
show less
Brute-Force
SSH
Anonymous
Sep 3 04:08:20 nordic sshd[1276104]: Invalid user ssd from 161.35.34.21 port 60794
Sep 3 04:11:43 ...
show moreSep 3 04:08:20 nordic sshd[1276104]: Invalid user ssd from 161.35.34.21 port 60794
Sep 3 04:11:43 nordic sshd[1276309]: Invalid user kontakt from 161.35.34.21 port 58210
...
show less
2026-09-02T18:18:06.435865-07:00 ftp-green sshd[2619740]: Disconnected from invalid user up 161.35.3 ...
show more2026-09-02T18:18:06.435865-07:00 ftp-green sshd[2619740]: Disconnected from invalid user up 161.35.34.21 port 40314 [preauth]
2026-09-02T18:24:21.238992-07:00 ftp-green sshd[2619881]: Invalid user vikas from 161.35.34.21 port 39648
2026-09-02T18:24:21.243005-07:00 ftp-green sshd[2619881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.34.21
2026-09-02T18:24:23.113611-07:00 ftp-green sshd[2619881]: Failed password for invalid user vikas from 161.35.34.21 port 39648 ssh2
2026-09-02T18:24:23.743413-07:00 ftp-green sshd[2619881]: Disconnected from invalid user vikas 161.35.34.21 port 39648 [preauth]
...
show less
SSH brute-force attempt from 161.35.34.21 blocked by Orlando. 2026-08-15 13:00:23,153 fail2ban.actio ...
show moreSSH brute-force attempt from 161.35.34.21 blocked by Orlando. 2026-08-15 13:00:23,153 fail2ban.actions [533]: NOTICE [sshd] Ban 161.35.34.21
2026-08-15 13:18:09,779 fail2ban.actions [533]: NOTICE [sshd] Ban 161.35.34.21
show less
2026-09-02T20:24:39.412643 arp-hbs-db sshd[222636]: Failed password for invalid user dante from 161. ...
show more2026-09-02T20:24:39.412643 arp-hbs-db sshd[222636]: Failed password for invalid user dante from 161.35.34.21 port 40380 ssh2
2026-09-02T20:30:45.849785 arp-hbs-db sshd[247309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.34.21 user=root
2026-09-02T20:30:47.334278 arp-hbs-db sshd[247309]: Failed password for root from 161.35.34.21 port 35978 ssh2
...
show less
2026-09-02T21:36:51.177858vm162835.hosted-by.qwins.co sshd[947845]: Invalid user server from 161.35. ...
show more2026-09-02T21:36:51.177858vm162835.hosted-by.qwins.co sshd[947845]: Invalid user server from 161.35.34.21 port 44128
2026-09-02T21:36:51.184490vm162835.hosted-by.qwins.co sshd[947845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.34.21
2026-09-02T21:36:53.146752vm162835.hosted-by.qwins.co sshd[947845]: Failed password for invalid user server from 161.35.34.21 port 44128 ssh2
...
show less
Sep 2 22:49:06 fastdl sshd[2100967]: Failed password for invalid user gl from 161.35.34.21 port 547 ...
show moreSep 2 22:49:06 fastdl sshd[2100967]: Failed password for invalid user gl from 161.35.34.21 port 54762 ssh2
Sep 2 22:50:04 fastdl sshd[2101611]: Invalid user devuser from 161.35.34.21 port 48744
Sep 2 22:50:04 fastdl sshd[2101611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.34.21
Sep 2 22:50:06 fastdl sshd[2101611]: Failed password for invalid user devuser from 161.35.34.21 port 48744 ssh2
Sep 2 22:51:02 fastdl sshd[2102343]: Invalid user ubuntu from 161.35.34.21 port 53802
Sep 2 22:51:02 fastdl sshd[2102343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.34.21
Sep 2 22:51:03 fastdl sshd[2102343]: Failed password for invalid user ubuntu from 161.35.34.21 port 53802 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 4069 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩