This IP address has been reported a total of
14
times from
8 distinct
sources.
120.222.7.172 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
China
with 13
reports;
Japan
with 1
report.
The most common categories in these recent reports were:
Brute-Force
13
times;
SSH
10
times;
Port Scan
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-08T16:46:58.589275+08:00 *hostname* sshd-session[76824]: Invalid user ubuntu from 120.222.7. ...
show more2026-10-08T16:46:58.589275+08:00 *hostname* sshd-session[76824]: Invalid user ubuntu from 120.222.7.172 port 42836
2026-10-08T16:46:58.661141+08:00 *hostname* sshd-session[76828]: Connection from 120.222.7.172 port 42856 on 10.89.160.7 port 22 rdomain ""
2026-10-08T16:46:58.746774+08:00 *hostname* sshd-session[76828]: Invalid user ubuntu from 120.222.7.172 port 42856
2026-10-08T16:46:58.824228+08:00 *hostname* sshd-session[76832]: Connection from 120.222.7.172 port 42872 on 10.89.160.7 port 22 rdomain ""
2026-10-08T16:46:58.915201+08:00 *hostname* sshd-session[76832]: Invalid user ubuntu from 120.222.7.172 port 42872
show less
2026-10-07T23:53:22.631427+08:00 localhost sshd[942075]: Invalid user ubuntu from 120.222.7.172 port ...
show more2026-10-07T23:53:22.631427+08:00 localhost sshd[942075]: Invalid user ubuntu from 120.222.7.172 port 47858
2026-10-07T23:53:22.793010+08:00 localhost sshd[942078]: Invalid user ubuntu from 120.222.7.172 port 47874
2026-10-07T23:53:22.963268+08:00 localhost sshd[942081]: Invalid user ubuntu from 120.222.7.172 port 47890
...
show less
2026-10-07T01:10:57.044250+08:00 *hostname* sshd-session[288282]: Invalid user ubuntu from 120.222.7 ...
show more2026-10-07T01:10:57.044250+08:00 *hostname* sshd-session[288282]: Invalid user ubuntu from 120.222.7.172 port 46698
2026-10-07T01:10:57.134139+08:00 *hostname* sshd-session[288285]: Connection from 120.222.7.172 port 46726 on 115.231.27.164 port 22 rdomain ""
2026-10-07T01:10:57.255791+08:00 *hostname* sshd-session[288285]: Invalid user ubuntu from 120.222.7.172 port 46726
2026-10-07T01:10:57.351694+08:00 *hostname* sshd-session[288288]: Connection from 120.222.7.172 port 46732 on 115.231.27.164 port 22 rdomain ""
2026-10-07T01:10:57.485599+08:00 *hostname* sshd-session[288288]: Invalid user ubuntu from 120.222.7.172 port 46732
show less
2026-10-04T19:14:14.995942+08:00 VM-8-9-debian sshd[2586154]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-04T19:14:14.995942+08:00 VM-8-9-debian sshd[2586154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.222.7.172
2026-10-04T19:14:16.377362+08:00 VM-8-9-debian sshd[2586154]: Failed password for invalid user ubuntu from 120.222.7.172 port 50004 ssh2
2026-10-04T19:14:17.279889+08:00 VM-8-9-debian sshd[2586172]: Invalid user ubuntu from 120.222.7.172 port 50038
...
show less
2026-10-04T17:14:11.469761+08:00 VM-8-9-debian sshd[2570522]: Failed password for root from 120.222. ...
show more2026-10-04T17:14:11.469761+08:00 VM-8-9-debian sshd[2570522]: Failed password for root from 120.222.7.172 port 35032 ssh2
2026-10-04T17:14:13.196938+08:00 VM-8-9-debian sshd[2570526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.222.7.172 user=root
2026-10-04T17:14:14.675092+08:00 VM-8-9-debian sshd[2570526]: Failed password for root from 120.222.7.172 port 53632 ssh2
...
show less
2026-10-04T07:38:07.510443+08:00 localhost sshd-session[2340993]: Invalid user ubuntu from 120.222.7 ...
show more2026-10-04T07:38:07.510443+08:00 localhost sshd-session[2340993]: Invalid user ubuntu from 120.222.7.172 port 49426
2026-10-04T07:38:07.673248+08:00 localhost sshd-session[2340996]: Invalid user ubuntu from 120.222.7.172 port 49440
2026-10-04T07:38:07.827467+08:00 localhost sshd-session[2340999]: Invalid user ubuntu from 120.222.7.172 port 49446
...
show less
2026-10-01T20:20:22.908277+08:00 *hostname* sshd-session[221082]: Invalid user ubuntu from 120.222.7 ...
show more2026-10-01T20:20:22.908277+08:00 *hostname* sshd-session[221082]: Invalid user ubuntu from 120.222.7.172 port 40614
2026-10-01T20:20:23.060939+08:00 *hostname* sshd-session[221086]: Connection from 120.222.7.172 port 40636 on 10.66.0.230 port 22 rdomain ""
2026-10-01T20:20:23.262161+08:00 *hostname* sshd-session[221086]: Invalid user ubuntu from 120.222.7.172 port 40636
2026-10-01T20:20:23.415384+08:00 *hostname* sshd-session[221089]: Connection from 120.222.7.172 port 40646 on 10.66.0.230 port 22 rdomain ""
2026-10-01T20:20:23.617611+08:00 *hostname* sshd-session[221089]: Invalid user ubuntu from 120.222.7.172 port 40646
show less
2026-10-01T14:24:55.262851+08:00 self-dedi-wyse-5070-tna sshd-session[846708]: Invalid user ubuntu f ...
show more2026-10-01T14:24:55.262851+08:00 self-dedi-wyse-5070-tna sshd-session[846708]: Invalid user ubuntu from 120.222.7.172 port 35200
2026-10-01T14:24:55.362792+08:00 self-dedi-wyse-5070-tna sshd-session[846711]: Invalid user ubuntu from 120.222.7.172 port 35226
2026-10-01T14:24:55.462227+08:00 self-dedi-wyse-5070-tna sshd-session[846714]: Invalid user ubuntu from 120.222.7.172 port 35250
...
show less
2026-09-30T20:08:21.356318+08:00 *hostname* sshd-session[1443371]: Invalid user ubuntu from 120.222. ...
show more2026-09-30T20:08:21.356318+08:00 *hostname* sshd-session[1443371]: Invalid user ubuntu from 120.222.7.172 port 48772
2026-09-30T20:10:53.239405+08:00 *hostname* sshd-session[1443383]: Connection from 120.222.7.172 port 35288 on 10.100.131.227 port 22 rdomain ""
2026-09-30T20:10:53.331089+08:00 *hostname* sshd-session[1443383]: Invalid user ubuntu from 120.222.7.172 port 35288
2026-09-30T20:10:53.408288+08:00 *hostname* sshd-session[1443387]: Connection from 120.222.7.172 port 35298 on 10.100.131.227 port 22 rdomain ""
2026-09-30T20:10:53.497130+08:00 *hostname* sshd-session[1443387]: Invalid user ubuntu from 120.222.7.172 port 35298
show less
Brute-Force
SSH
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
