This IP address has been reported a total of
105
times from
99 distinct
sources.
34.22.149.22 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 28
reports;
United States of America
with 23
reports;
France
with 11
reports.
The most common categories in these recent reports were:
SSH
97
times;
Brute-Force
94
times;
Port Scan
14
times;
Hacking
9
times;
Exploited Host
3
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-09T12:34:01.387Z, an unauthorized SSH access attempt was detected from source IP address 34. ...
show more2026-10-09T12:34:01.387Z, an unauthorized SSH access attempt was detected from source IP address 34.22.149.22 by our NetFlow-based intrusion detection.
show less
Oct 9 11:33:29 eos sshd-session[784989]: Invalid user admin from 34.22.149.22 port 20354
Oct 9 11: ...
show moreOct 9 11:33:29 eos sshd-session[784989]: Invalid user admin from 34.22.149.22 port 20354
Oct 9 11:33:31 eos sshd-session[784989]: error: PAM: User not known to the underlying authentication module for illegal user admin from 34.22.149.22
Oct 9 11:33:31 eos sshd-session[784989]: Failed keyboard-interactive/pam for invalid user admin from 34.22.149.22 port 20354 ssh2
...
show less
2026-10-09T10:02:12.319833+02:00 gXdNODE2 sshd-session[140357]: Invalid user tovae from 34.22.149.22 ...
show more2026-10-09T10:02:12.319833+02:00 gXdNODE2 sshd-session[140357]: Invalid user tovae from 34.22.149.22 port 61900
...
show less
2026-10-09 07:52:32,750 quad proftpd[3251014] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (22.149.22.34.bc. ...
show more2026-10-09 07:52:32,750 quad proftpd[3251014] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (22.149.22.34.bc.googleusercontent.com[34.22.149.22]): USER admin: no such user found from 22.149.22.34.bc.googleusercontent.com [34.22.149.22] to 2.56.97.107:22
show less
Oct 9 10:14:45 khomus sshd-session[1334]: Invalid user admin from 34.22.149.22 port 14274
Oct 9 10 ...
show moreOct 9 10:14:45 khomus sshd-session[1334]: Invalid user admin from 34.22.149.22 port 14274
Oct 9 10:14:45 khomus sshd-session[1334]: error: PAM: Authentication error for illegal user admin from 22.149.22.34.bc.googleusercontent.com
Oct 9 10:14:45 khomus sshd-session[1334]: Failed keyboard-interactive/pam for invalid user admin from 34.22.149.22 port 14274 ssh2
Oct 9 10:14:45 khomus sshd-session[1334]: Connection closed by invalid user admin 34.22.149.22 port 14274 [preauth]
Oct 9 10:14:47 khomus sshd-session[1332]: Connection closed by 34.22.149.22 port 14266 [preauth]
...
show less
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 24/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 24/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 6 (0 bad password, 6 invalid user) | 0 success | 12 total SSH log events | seen on 3 sensor(s)
Origin: Belgium (BE) | AS396982 Google LLC | datacenter | 34.22.149.0/24
First seen: 2026-10-09 02:46:04 UTC | Last seen: 2026-10-09 06:45:52 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-10-09T18:45:18.597872+12:00 dara sshd-session[2601616]: Unable to negotiate with 34.22.149.22 p ...
show more2026-10-09T18:45:18.597872+12:00 dara sshd-session[2601616]: Unable to negotiate with 34.22.149.22 port 5642: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-10-09T18:45:18.745484+12:00 dara sshd-session[2601618]: Connection from 34.22.149.22 port 5644 on 135.181.182.173 port 22 rdomain ""
2026-10-09T18:45:18.867390+12:00 dara sshd-session[2601618]: Unable to negotiate with 34.22.149.22 port 5644: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-10-09T18:45:18.747928+12:00 dara sshd-session[2601619]: Connection from 34.22.149.22 port 5656 on 135.181.182.173 port 22 rdomain ""
2026-1
...
show less
2026-10-09T06:38:17.343203+00:00 edge-fog-swb01.int.pdx.net.uk sshd[2155246]: pam_unix(sshd:auth): a ...
show more2026-10-09T06:38:17.343203+00:00 edge-fog-swb01.int.pdx.net.uk sshd[2155246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.22.149.22
2026-10-09T06:38:19.482151+00:00 edge-fog-swb01.int.pdx.net.uk sshd[2155246]: Failed password for invalid user admin from 34.22.149.22 port 48022 ssh2
2026-10-09T06:38:23.032892+00:00 edge-fog-swb01.int.pdx.net.uk sshd[2155246]: error: PAM: Authentication failure for illegal user admin from 34.22.149.22
...
show less
Brute-Force
SSH
Anonymous
2026-10-09T08:38:09.968439+02:00 mail.gwyll.eu sshd-session[3642284]: Invalid user admin from 34.22. ...
show more2026-10-09T08:38:09.968439+02:00 mail.gwyll.eu sshd-session[3642284]: Invalid user admin from 34.22.149.22 port 1586
2026-10-09T08:38:09.996561+02:00 mail.gwyll.eu sshd-session[3642284]: Connection closed by invalid user admin 34.22.149.22 port 1586 [preauth]
2026-10-09T08:38:10.227594+02:00 mail.gwyll.eu sshd-session[3642280]: Connection closed by 34.22.149.22 port 1584 [preauth]
...
show less
