This IP address has been reported a total of
34
times from
27 distinct
sources.
120.26.118.50 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
United States of America
with 7
reports;
Canada
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
26
times;
SSH
24
times;
Port Scan
8
times;
Hacking
2
times;
Exploited Host
1
time;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-07T23:08:28.315638+00:00 arrow-md1 sshd-session[21110]: Failed password for root from 120.26 ...
show more2026-10-07T23:08:28.315638+00:00 arrow-md1 sshd-session[21110]: Failed password for root from 120.26.118.50 port 45974 ssh2
2026-10-07T23:08:30.282610+00:00 arrow-md1 sshd-session[21113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.118.50 user=root
2026-10-07T23:08:32.390005+00:00 arrow-md1 sshd-session[21113]: Failed password for root from 120.26.118.50 port 45982 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
2026-10-06T18:43:33.289719Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:3286 ...
show more2026-10-06T18:43:33.289719Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:32862 (158.69.22.11:2222) [session: bbe8a6b70d6e]
2026-10-06T18:43:33.790164Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:46162 (158.69.22.11:2222) [session: 30ee518b8c3e]
...
show less
SSH honeypot login attempts; session never became a real shell.
TCP/2222 SSH honeypot; handshake com ...
show moreSSH honeypot login attempts; session never became a real shell.
TCP/2222 SSH honeypot; handshake completed, no real shell.
jail=cowrie proto=tcp port=2222 failures>=3 users=root method=password-auth
auth_result=none_succeeded this is not the production sshd
when=2026-10-06T08:25:45Z sensor=fail2ban role=ssh-honeypot
src=120.26.118.50
show less
2026-10-06T00:49:26.950279Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:5262 ...
show more2026-10-06T00:49:26.950279Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:52622 (158.69.22.11:2222) [session: 2d71928a4838]
2026-10-06T00:49:27.514336Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.118.50:52624 (158.69.22.11:2222) [session: 85575dff2318]
...
show less
