Check an IP Address, Domain Name, Subnet, or ASN
35.205.166.64 has a threat confidence score of 68%. This IP address from Belgium (AS396982, Google LLC) has been observed in 7 honeypot sessions targeting HTTPS, HTTP, FTP, POSTGRES protocols. First observed on March 18, 2026, most recently active March 22, 2026.
FTP session where a client probes for valid usernames, attempts authentication, negotiates transfer settings (ASCII and UTF-8), retrieves the current working directory, changes directories, enters passive mode, issues directory listings, and sends NOOP to maintain the session. This sequence reflects structured post-authentication exploration of the FTP file system to map directory structure and available content.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration