This IP address has been reported a total of
52
times from
43 distinct
sources.
72.212.48.141 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 11
reports;
United States of America
with 7
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
45
times;
SSH
34
times;
Hacking
9
times;
Port Scan
5
times;
Web App Attack
5
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Synology DSM web login brute-force: 10 failed sign-in attempt(s) between 09:19:45 and 19:02:59 CEST ...
show moreSynology DSM web login brute-force: 10 failed sign-in attempt(s) between 09:19:45 and 19:02:59 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
show less
This IP address carried out 2 SSH credential attack (attempts) on 05-10-2026. For more information o ...
show moreThis IP address carried out 2 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Anonymous
Web directory scan: 10 requests in 3h 52m (Last path: '/webapi/auth.cgi?account=erojas&api=SYNO.API. ...
show moreWeb directory scan: 10 requests in 3h 52m (Last path: '/webapi/auth.cgi?account=erojas&api=SYNO.API.Auth&format=sid&method=login&passwd=123&session=FileStation&version=6').
show less
Automated brute-force authentication attempt against Synology DSM management portal. Blocked by auto ...
show moreAutomated brute-force authentication attempt against Synology DSM management portal. Blocked by autoblock.
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-04T22:38:12Z to 2026-10-04T22:38:12Z UTC.
2026-10-04T22:38:12Z tcp/2222 data: SSH-2.0-OpenSSH_8.9
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
2026-10-04T18:09:45.423669-06:00 node1.us sshd-session[3143732]: Connection closed by authenticating ...
show more2026-10-04T18:09:45.423669-06:00 node1.us sshd-session[3143732]: Connection closed by authenticating user root 72.212.48.141 port 34616 [preauth]
2026-10-04T18:17:10.368522-06:00 node1.us sshd-session[3152529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.212.48.141 user=root
2026-10-04T18:17:12.003956-06:00 node1.us sshd-session[3152529]: Failed password for root from 72.212.48.141 port 59422 ssh2
...
show less
