This IP address has been reported a total of
23
times from
22 distinct
sources.
220.184.139.100 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot; usernames=["root"]; p ...
show moreSSH authentication brute-force attempt against GAS85/ssh-auth-logger honeypot; usernames=["root"]; passwords_sha1=["24bf68e341ce0fbd9259a5d51feed79682ea4eba" "a6eb4d9d7f99ca47abe56f3220597663cf37ca4a" "b3a5425f7ebac5a1b19d0d34418ce0a4f64a7a51" "ba324ca7b1c77fc20bb970d5aff6eea9377918a5" "58a3ed6f2965252c6ac4957d95f7a3bdfca47101" "f460c882a18c1304d88854e902e11b85d71e7e1b" "62eb0db178518a8376b23676c2639eb2732c0be8" "e982f17bcbe0f724063b708a4f76db211a999304" "01c11b905baadb7596ab220fcf3c5d939cd29c16" "86dd1cf45142e904cb2e99c2721fac3ca198c6ca"]
show less
Brute-Force
SSH
Anonymous
2026-09-17T18:18:01.196400+00:00 de-fra2-rpki1 sshd[363036]: Invalid user user from 220.184.139.100 ...
show more2026-09-17T18:18:01.196400+00:00 de-fra2-rpki1 sshd[363036]: Invalid user user from 220.184.139.100 port 35772
2026-09-17T18:18:10.636119+00:00 de-fra2-rpki1 sshd[363039]: Invalid user user from 220.184.139.100 port 38794
2026-09-17T18:18:22.545159+00:00 de-fra2-rpki1 sshd[363042]: Invalid user user from 220.184.139.100 port 48764
...
show less
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ...
show moreHoneypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-09-17T16:19:26.772Z ACCEPT host=::ffff:220.184.139.100 port=46002 fd=5 n=2/4096
...
show less
2026-09-17T10:32:38.644572 nas.marchenko.net sshd-session[468510]: pam_unix(sshd:auth): authenticati ...
show more2026-09-17T10:32:38.644572 nas.marchenko.net sshd-session[468510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.184.139.100 user=root
2026-09-17T10:32:40.797812 nas.marchenko.net sshd-session[468510]: Failed password for invalid user root from 220.184.139.100 port 37586 ssh2
2026-09-17T10:32:45.166575 nas.marchenko.net sshd-session[468566]: User root from 220.184.139.100 not allowed because not listed in AllowUsers
...
show less
2026-09-17T08:31:37.017383-05:00 nocix-dedi-bf2421-mci sshd-session[2687214]: Invalid user user from ...
show more2026-09-17T08:31:37.017383-05:00 nocix-dedi-bf2421-mci sshd-session[2687214]: Invalid user user from 220.184.139.100 port 51480
2026-09-17T08:31:38.430830-05:00 nocix-dedi-bf2421-mci sshd-session[2687230]: Invalid user user from 220.184.139.100 port 53804
2026-09-17T08:31:39.623220-05:00 nocix-dedi-bf2421-mci sshd-session[2687232]: Invalid user user from 220.184.139.100 port 55278
...
show less
2026-09-17T11:44:42.207919+00:00 ZT1 sshd[518453]: Failed password for root from 220.184.139.100 por ...
show more2026-09-17T11:44:42.207919+00:00 ZT1 sshd[518453]: Failed password for root from 220.184.139.100 port 46980 ssh2
2026-09-17T11:44:47.688815+00:00 ZT1 sshd[518871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.184.139.100 user=root
2026-09-17T11:44:49.386378+00:00 ZT1 sshd[518871]: Failed password for root from 220.184.139.100 port 55258 ssh2
...
show less
2026-09-17T07:58:33.152426+00:00 rc01 sshd-session[1648951]: Failed password for root from 220.184.1 ...
show more2026-09-17T07:58:33.152426+00:00 rc01 sshd-session[1648951]: Failed password for root from 220.184.139.100 port 60758 ssh2
2026-09-17T07:58:36.978848+00:00 rc01 sshd-session[1648954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.184.139.100 user=root
2026-09-17T07:58:39.097432+00:00 rc01 sshd-session[1648954]: Failed password for root from 220.184.139.100 port 40476 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩