IP address 176.120.22.17 has been flagged in 777 abuse reports across 22 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggressive scanner, along with attacks, brute force, compromised, malicious, malware c2, persistent attacker, professional threat, ssh-bruteforce, ssh brute force, ssh bruteforce, suspicious activity, web attack, web brute force.
This IP is geolocated in Russia and belongs to the network Proton66 OOO (AS198953). Reports span from 2026-01-25 to 2026-04-05.
Assessment: With 777 abuse reports, 176.120.22.17 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. The IP has been observed conducting automated SSH login attempts against internet-facing servers, a technique commonly used to gain unauthorized access to systems.