This IP address has been reported a total of
56
times from
51 distinct
sources.
207.2.120.172 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 23 20:14:54 webServer-02 sshd[4013993]: Invalid user ubuntu from 207.2.120.172 port 43144
Sep 23 ...
show moreSep 23 20:14:54 webServer-02 sshd[4013993]: Invalid user ubuntu from 207.2.120.172 port 43144
Sep 23 20:16:20 webServer-02 sshd[4014019]: Invalid user sajjad from 207.2.120.172 port 59208
Sep 23 20:17:41 webServer-02 sshd[4014040]: Invalid user sabrina from 207.2.120.172 port 57934
Sep 23 20:18:56 webServer-02 sshd[4014059]: Invalid user mohammad from 207.2.120.172 port 45750
Sep 23 20:20:16 webServer-02 sshd[4014103]: Invalid user zyx from 207.2.120.172 port 33872
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Sep 23 07:15:16 vmi2395471 sshd[1787835]: Invalid user ubuntu from 207.2.120.172 port 50986
Sep 23 0 ...
show moreSep 23 07:15:16 vmi2395471 sshd[1787835]: Invalid user ubuntu from 207.2.120.172 port 50986
Sep 23 07:15:16 vmi2395471 sshd[1787835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.2.120.172
Sep 23 07:15:18 vmi2395471 sshd[1787835]: Failed password for invalid user ubuntu from 207.2.120.172 port 50986 ssh2
...
show less
(sshd) Failed SSH login from 207.2.120.172 (SE/-/-): 5 in the last 3600 secs; Ports: *; Direction: i ...
show more(sshd) Failed SSH login from 207.2.120.172 (SE/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 05:48:05 na-s3 sshd[1391275]: Invalid user test12 from 207.2.120.172 port 46322
Sep 23 05:49:24 na-s3 sshd[1404804]: Invalid user simon from 207.2.120.172 port 42868
Sep 23 05:50:43 na-s3 sshd[1418834]: Invalid user yas from 207.2.120.172 port 46098
Sep 23 05:51:58 na-s3 sshd[1430941]: Invalid user sonec from 207.2.120.172 port 34056
Sep 23 05:56:10 na-s3 sshd[1476854]: Invalid user linux from 207.2.120.172 port 56010
show less
2026-09-23T11:35:39.861868+02:00 theve sshd-session[1373442]: Invalid user user from 207.2.120.172 p ...
show more2026-09-23T11:35:39.861868+02:00 theve sshd-session[1373442]: Invalid user user from 207.2.120.172 port 57496
...
show less
2026-09-23T11:07:23.115872+02:00 Gameserver sshd-session[3374093]: Invalid user smb from 207.2.120.1 ...
show more2026-09-23T11:07:23.115872+02:00 Gameserver sshd-session[3374093]: Invalid user smb from 207.2.120.172 port 44166
2026-09-23T11:10:09.622481+02:00 Gameserver sshd-session[3374142]: Invalid user superadmin from 207.2.120.172 port 39956
2026-09-23T11:11:30.408239+02:00 Gameserver sshd-session[3374158]: Invalid user user1 from 207.2.120.172 port 36948
2026-09-23T11:12:49.474400+02:00 Gameserver sshd-session[3374173]: Invalid user lcx from 207.2.120.172 port 44512
2026-09-23T11:14:06.987801+02:00 Gameserver sshd-session[3374208]: Invalid user npadmin from 207.2.120.172 port 59366
...
show less
2026-09-23T09:08:14.498452+00:00 vps-de sshd[818381]: Invalid user smb from 207.2.120.172 port 38886 ...
show more2026-09-23T09:08:14.498452+00:00 vps-de sshd[818381]: Invalid user smb from 207.2.120.172 port 38886
2026-09-23T09:08:14.503535+00:00 vps-de sshd[818381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.2.120.172
2026-09-23T09:08:16.329339+00:00 vps-de sshd[818381]: Failed password for invalid user smb from 207.2.120.172 port 38886 ssh2
2026-09-23T09:09:38.603179+00:00 vps-de sshd[818397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.2.120.172 user=root
2026-09-23T09:09:40.294779+00:00 vps-de sshd[818397]: Failed password for root from 207.2.120.172 port 56210 ssh2
...
show less
2026-09-23T18:06:54.230314+09:00 *** sshd-session[3551463]: pam_unix(sshd:auth): authentication fai ...
show more2026-09-23T18:06:54.230314+09:00 *** sshd-session[3551463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.2.120.172 user=root
2026-09-23T18:06:56.335503+09:00 *** sshd-session[3551463]: Failed password for root from 207.2.120.172 port 60008 ssh2
2026-09-23T18:08:17.977557+09:00 *** sshd-session[3551809]: Invalid user smb from 207.2.120.172 port 40386
show less
2026-09-23T09:00:52.403075+00:00 vps1 sshd[2649807]: Disconnected from authenticating user root 207. ...
show more2026-09-23T09:00:52.403075+00:00 vps1 sshd[2649807]: Disconnected from authenticating user root 207.2.120.172 port 52616 [preauth]
2026-09-23T09:06:18.193559+00:00 vps1 sshd[2650318]: Disconnected from authenticating user root 207.2.120.172 port 52618 [preauth]
2026-09-23T09:07:44.344959+00:00 vps1 sshd[2650455]: Invalid user smb from 207.2.120.172 port 34838
...
show less
2026-09-23T07:53:12.006659+00:00 pastoralgrowth sshd[42815]: Failed password for root from 207.2.120 ...
show more2026-09-23T07:53:12.006659+00:00 pastoralgrowth sshd[42815]: Failed password for root from 207.2.120.172 port 54688 ssh2
2026-09-23T07:53:12.140269+00:00 pastoralgrowth sshd[42815]: error: maximum authentication attempts exceeded for root from 207.2.120.172 port 54688 ssh2 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 56 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩