AbuseIPDB » 120.26.139.111

120.26.139.111 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 89%: ?

89%

ISP	Aliyun Computing Co., LTD
Usage Type	Commercial
ASN	AS37963
Domain Name	alibabacloud.com
Country	China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 120.26.139.111

Whois 120.26.139.111

IP Abuse Reports for 120.26.139.111:

This IP address has been reported a total of 206 times from 77 distinct sources. 120.26.139.111 was first reported on January 31st 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-06-13 00:49:03 (7 hours ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/120.26.139.111 2025-06-12 ... show moreThreatBook Intelligence: IDC more details on http://threatbook.io/ip/120.26.139.111 2025-06-12 10:47:39 ["uname -s -m"] show less	SSH
senkodigital	2025-06-12 15:25:12 (16 hours ago)	2025-06-12T15:25:11.472830Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:434 ... show more2025-06-12T15:25:11.472830Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:43490 (158.69.22.11:2222) [session: a83817355dbc] 2025-06-12T15:25:11.994507Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:43498 (158.69.22.11:2222) [session: dacf761996df] ... show less	Brute-Force SSH
giata	2025-06-11 20:29:22 (1 day ago)	2025-06-11T20:29:17.229087 upload sshd[1630939]: Failed password for root from 120.26.139.111 port 3 ... show more2025-06-11T20:29:17.229087 upload sshd[1630939]: Failed password for root from 120.26.139.111 port 35426 ssh2 2025-06-11T20:29:18.869794 upload sshd[1630942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root 2025-06-11T20:29:20.347516 upload sshd[1630942]: Failed password for root from 120.26.139.111 port 35434 ssh2 ... show less	Brute-Force SSH
www.narsol.org	2025-06-10 13:55:50 (2 days ago)	Jun 10 09:55:42 do1 sshd[2606625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreJun 10 09:55:42 do1 sshd[2606625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root Jun 10 09:55:43 do1 sshd[2606625]: Failed password for root from 120.26.139.111 port 56326 ssh2 Jun 10 09:55:45 do1 sshd[2606625]: Connection closed by authenticating user root 120.26.139.111 port 56326 [preauth] Jun 10 09:55:47 do1 sshd[2606651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root Jun 10 09:55:49 do1 sshd[2606651]: Failed password for root from 120.26.139.111 port 33920 ssh2 ... show less	Brute-Force SSH
www.narsol.org	2025-06-09 03:33:50 (4 days ago)	Jun 8 23:33:44 do1 sshd[1435418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreJun 8 23:33:44 do1 sshd[1435418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root Jun 8 23:33:46 do1 sshd[1435418]: Failed password for root from 120.26.139.111 port 51010 ssh2 Jun 8 23:33:47 do1 sshd[1435418]: Connection closed by authenticating user root 120.26.139.111 port 51010 [preauth] Jun 8 23:33:48 do1 sshd[1435440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root Jun 8 23:33:50 do1 sshd[1435440]: Failed password for root from 120.26.139.111 port 51014 ssh2 ... show less	Brute-Force SSH
zwh	2025-06-06 17:47:01 (6 days ago)	SSH Brute-Force	Brute-Force SSH
tc-hawkes.icu	2025-06-06 16:10:19 (6 days ago)	SSH Bruteforce ...	Brute-Force SSH
SOC [GOLINE SA]	2025-06-06 05:12:29 (1 week ago)	FortiGate detected brute force login from IP 120.26.139.111	Brute-Force
Ariazonaa	2025-06-05 14:56:14 (1 week ago)	SSH brute-force attempt detected on fsn-01-monitor	Brute-Force SSH
sid3windr	2025-06-04 05:56:13 (1 week ago)	SSH port scan (Tarpitted for 20s, wasted 20B)	Port Scan SSH
Anonymous	2025-05-30 22:00:43 (1 week ago)	$f2bV_matches	Brute-Force SSH
senkodigital	2025-05-30 09:03:42 (1 week ago)	2025-05-30T09:03:41.555298Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:603 ... show more2025-05-30T09:03:41.555298Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:60332 (158.69.22.11:2222) [session: 97ee0ebfb769] 2025-05-30T09:03:42.085639Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.26.139.111:60340 (158.69.22.11:2222) [session: d075fa6cec10] ... show less	Brute-Force SSH
ThreatBook.io	2025-05-30 01:03:18 (2 weeks ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/120.26.139.111	SSH
danirod	2025-05-28 04:30:35 (2 weeks ago)	May 28 04:30:30 vps324820 sshd[4104560]: Failed password for root from 120.26.139.111 port 48672 ssh ... show moreMay 28 04:30:30 vps324820 sshd[4104560]: Failed password for root from 120.26.139.111 port 48672 ssh2 May 28 04:30:32 vps324820 sshd[4104641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.139.111 user=root May 28 04:30:34 vps324820 sshd[4104641]: Failed password for root from 120.26.139.111 port 56118 ssh2 ... show less	Brute-Force SSH
Richie	2025-05-27 14:54:18 (2 weeks ago)	[HOST1] FTP Brute Force attempt	FTP Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩