JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.26.13.68

120.26.13.68 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 78%: ?

78%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.26.13.68

Whois 120.26.13.68

IP Abuse Reports for 120.26.13.68:

This IP address has been reported a total of 19 times from 15 distinct sources. 120.26.13.68 was first reported on June 12th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Teknikal_Domain	2026-06-13 20:14:08 (3 days ago)	Jun 13 16:14:01 gen sshd[1924909]: Failed password for root from 120.26.13.68 port 46526 ssh2 Jun 13 ... show more Jun 13 16:14:01 gen sshd[1924909]: Failed password for root from 120.26.13.68 port 46526 ssh2 Jun 13 16:14:04 gen sshd[1924911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.13.68 user=root Jun 13 16:14:06 gen sshd[1924911]: Failed password for root from 120.26.13.68 port 46540 ssh2 ... show less	Brute-Force SSH
🇩🇪 anycast_ac	2026-06-13 19:25:22 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh). Commands captured: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh). Commands captured: $ SSH-2.0-Go show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-06-13 19:08:04 (3 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).	DDoS Attack IoT Targeted Brute-Force
🇨🇦 senkodev	2026-06-13 19:02:45 (3 days ago)	2026-06-13T19:02:44.493333Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.13.68:51174 ... show more 2026-06-13T19:02:44.493333Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.13.68:51174 (158.69.22.11:2222) [session: 07a5a811765a] 2026-06-13T19:02:45.112377Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.13.68:51182 (158.69.22.11:2222) [session: 4e885d085dfe] ... show less	Brute-Force SSH
🇩🇪 giata	2026-06-13 18:28:58 (3 days ago)	2026-06-13T18:28:50.087711 upload sshd[3092547]: Failed password for root from 120.26.13.68 port 556 ... show more 2026-06-13T18:28:50.087711 upload sshd[3092547]: Failed password for root from 120.26.13.68 port 55648 ssh2 2026-06-13T18:28:55.808906 upload sshd[3092550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.13.68 user=root 2026-06-13T18:28:57.339451 upload sshd[3092550]: Failed password for root from 120.26.13.68 port 48234 ssh2 ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2026-06-13 17:30:44 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 8022 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8022 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 licen777	2026-06-13 10:45:01 (3 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-13T09:42:07Z and 2026-06-1 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-13T09:42:07Z and 2026-06-13T10:45:01Z show less	Brute-Force SSH
🇦🇺 LiftUp Hosting	2026-06-13 10:22:01 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 3022 [1] TCP	Port Scan
🇹🇷 Threat.live	2026-06-13 09:30:03 (3 days ago)	Threat.live: Brute Force	Brute-Force
🇬🇷 Xev	2026-06-13 08:19:51 (4 days ago)	SSH credentials BruteForce Date: 2026-06-13 08:19:49 UTC Destination port: 22 Credentials used: Use ... show more SSH credentials BruteForce Date: 2026-06-13 08:19:49 UTC Destination port: 22 Credentials used: Username: root Password: ---fuck_you---- Targeted device: Raspberry Pi show less	Brute-Force SSH IoT Targeted
🇫🇷 TheHoneyPotter	2026-06-13 07:45:02 (4 days ago)	Honeypot [fc-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://git ... show more Honeypot [fc-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 geeek	2026-06-13 01:46:36 (4 days ago)	Port scanning: 2222 TCP Blocked	Port Scan
🇫🇷 TheHoneyPotter	2026-06-13 00:14:04 (4 days ago)	Honeypot [fc-honeypot]: Empty payload (likely service probe); 10022 [1] TCP Reported by: https://git ... show more Honeypot [fc-honeypot]: Empty payload (likely service probe); 10022 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 ShadowWhisperer	2026-06-12 23:05:29 (4 days ago)	SSH credential attempt. (credential denied)	Brute-Force SSH
🇷🇺 weke	2026-06-12 20:13:06 (4 days ago)	ip=120.26.13.68 \| user=root \| pass=---fuck_you---- \| event=cowrie.login.success \| source=ssh honeypo ... show more ip=120.26.13.68 \| user=root \| pass=---fuck_you---- \| event=cowrie.login.success \| source=ssh honeypot MSK \| time=2026-06-12T20:13:06.278382Z show less	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4020:c00::12a

🇺🇸 2001:470:1:c84::9e

🇲🇾 205.186.64.137

🇨🇳 202.99.211.194

🇨🇱 201.186.40.250

🇲🇦 196.115.163.254

🇺🇸 192.3.219.77

🇺🇸 192.3.142.148

🇫🇷 185.135.137.194

🇯🇵 172.104.100.117

🇺🇸 165.154.162.250

🇺🇸 165.154.36.105

🇯🇵 161.129.34.28

🇺🇸 159.203.140.159

🇳🇱 142.93.231.169

🇺🇸 128.241.229.52

🇨🇳 118.196.56.74

🇮🇳 106.51.83.25

🇨🇳 103.217.193.33

🇧🇩 103.87.136.178