This IP address has been reported a total of
28
times from
24 distinct
sources.
120.157.72.25 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-04T15:18:59.775182+00:00 Canada1 sshd-session[3362605]: Connection closed by 120.157.72.25 p ...
show more2026-06-04T15:18:59.775182+00:00 Canada1 sshd-session[3362605]: Connection closed by 120.157.72.25 port 35896 [preauth]
2026-06-04T15:31:25.039679+00:00 Canada1 sshd-session[3448001]: Invalid user a from 120.157.72.25 port 52896
...
show less
Jun 4 06:33:46 sycorax sshd[303521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 4 06:33:46 sycorax sshd[303521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25
Jun 4 06:33:48 sycorax sshd[303521]: Failed password for invalid user a from 120.157.72.25 port 52160 ssh2
Jun 4 06:33:53 sycorax sshd[303524]: Invalid user ubnt from 120.157.72.25 port 38370
...
show less
Jun 4 12:48:04 mail6 sshd-session[1959875]: Failed password for invalid user a from 120.157.72.25 p ...
show moreJun 4 12:48:04 mail6 sshd-session[1959875]: Failed password for invalid user a from 120.157.72.25 port 47950 ssh2
Jun 4 12:48:10 mail6 sshd-session[1959952]: Invalid user ubnt from 120.157.72.25 port 58076
Jun 4 12:48:11 mail6 sshd-session[1959952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25
Jun 4 12:48:12 mail6 sshd-session[1959952]: Failed password for invalid user ubnt from 120.157.72.25 port 58076 ssh2
Jun 4 12:48:18 mail6 sshd-session[1959989]: User root from 120.157.72.25 not allowed because not listed in AllowUsers
...
show less
Jun 4 00:36:03 coyote sshd[327420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreJun 4 00:36:03 coyote sshd[327420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25
Jun 4 00:36:05 coyote sshd[327420]: Failed password for invalid user a from 120.157.72.25 port 36534 ssh2
Jun 4 00:36:08 coyote sshd[327422]: Invalid user ubnt from 120.157.72.25 port 51662
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Report 2419520 with IP 3467087 for SSH brute-force attack by source 3461745 via ssh-honeypot/0.2.0+h ...
show moreReport 2419520 with IP 3467087 for SSH brute-force attack by source 3461745 via ssh-honeypot/0.2.0+http
show less
2026-05-31T02:43:57.644719Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.157.72.25:4194 ...
show more2026-05-31T02:43:57.644719Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.157.72.25:41944 (158.69.22.11:2222) [session: a0030aa4a67a]
2026-05-31T02:44:01.981623Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.157.72.25:45982 (158.69.22.11:2222) [session: 1a0b43e6e1cb]
...
show less
2026-05-30T12:50:57.673025+02:00 www sshd-session[135662]: Failed password for invalid user a from 1 ...
show more2026-05-30T12:50:57.673025+02:00 www sshd-session[135662]: Failed password for invalid user a from 120.157.72.25 port 34092 ssh2
2026-05-30T12:50:59.343818+02:00 www sshd-session[135662]: Connection closed by invalid user a 120.157.72.25 port 34092 [preauth]
2026-05-30T12:51:01.095015+02:00 www sshd-session[135668]: Invalid user ubnt from 120.157.72.25 port 34108
2026-05-30T12:51:01.573266+02:00 www sshd-session[135668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25
2026-05-30T12:51:03.553946+02:00 www sshd-session[135668]: Failed password for invalid user ubnt from 120.157.72.25 port 34108 ssh2
show less
2026-05-30T05:08:00.716612+01:00 ubuntu sshd[38825]: Invalid user ubnt from 120.157.72.25 port 42506 ...
show more2026-05-30T05:08:00.716612+01:00 ubuntu sshd[38825]: Invalid user ubnt from 120.157.72.25 port 42506
2026-05-30T05:08:01.210610+01:00 ubuntu sshd[38825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25
2026-05-30T05:08:02.867000+01:00 ubuntu sshd[38825]: Failed password for invalid user ubnt from 120.157.72.25 port 42506 ssh2
2026-05-30T05:08:11.921293+01:00 ubuntu sshd[38828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.72.25 user=root
2026-05-30T05:08:13.617639+01:00 ubuntu sshd[38828]: Failed password for root from 120.157.72.25 port 60180 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 28 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩