120.224.172.222

120.224.172.222 is a threat-intelligence indicator (IPv4 address) classified as Malicious, corroborated across 6 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

120.224.172.222

Classification

Malicious

Confidence

95 / 100

Corroboration

6 independent sources

First seen

2026-06-24

Last seen

2026-07-02

Network (ASN)

AS24444 — CMNET-V4SHANDONG-AS-AP Shandong Mobile Communication Company Limited

Country

CN

Tags

• ssh
• brute-force
• attacker
• aggregate-source
• sshpwauth
• honeypot
• scanner
• malicious

Related CVEs (4)

• CVE-2025-23419
• CVE-2023-44487
• CVE-2022-41742
• CVE-2022-41741

← Threat intelligence command center · Explore the indicator corpus