This IP address has been reported a total of
36
times from
29 distinct
sources.
134.185.120.220 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-01T07:31:08.907409+00:00 thecount sshd[841211]: Connection closed by authenticating user roo ...
show more2026-09-01T07:31:08.907409+00:00 thecount sshd[841211]: Connection closed by authenticating user root 134.185.120.220 port 60506 [preauth]
...
show less
UFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 134.185.120.220
| this report is autogenerated by ZIME Cloud
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:123@@@, ro ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:123@@@, root:LeitboGi0ro
• Number of login attempts: 2
• Client: SSH-2.0-paramiko_5.0.0
show less
2026-08-31T21:21:30.176437-05:00 plex sshd-session[44235]: error: PAM: Authentication failure for ro ...
show more2026-08-31T21:21:30.176437-05:00 plex sshd-session[44235]: error: PAM: Authentication failure for root from 134.185.120.220
2026-08-31T21:21:30.658525-05:00 plex sshd-session[44237]: error: PAM: Authentication failure for root from 134.185.120.220
...
show less
[v6-22] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 22 from 134.185.120.220 — WAN ...
show more[v6-22] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 22 from 134.185.120.220 — WAN scan (automated sensor)
show less
Aug 31 22:51:18 instance1 sshd[1119395]: Connection closed by authenticating user root 134.185.120.2 ...
show moreAug 31 22:51:18 instance1 sshd[1119395]: Connection closed by authenticating user root 134.185.120.220 port 44838 [preauth]
...
show less
Cowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts fr ...
show moreCowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 1. New failed login attempts since the previous report: 1. Reason: Failed SSH login attempt. Target: SSH honeypot.
show less
Aug 31 19:11:34 vmori-manager-1 sshd[189006]: Connection closed by authenticating user root 134.185. ...
show moreAug 31 19:11:34 vmori-manager-1 sshd[189006]: Connection closed by authenticating user root 134.185.120.220 port 56890 [preauth]
...
show less
2026-08-31T17:30:04.700844 rhel-20gb-ash-1 sshd[1779103]: Connection closed by authenticating user r ...
show more2026-08-31T17:30:04.700844 rhel-20gb-ash-1 sshd[1779103]: Connection closed by authenticating user root 134.185.120.220 port 33352 [preauth]
...
show less