AbuseIPDB » 120.26.221.204
120.26.221.204
This IP was reported 7 times. Confidence of
Abuse
is 40% : ?
ISP
Aliyun Computing Co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS37963
Domain Name
alibabacloud.com
Country
🇨🇳
China
City
Hangzhou, Zhejiang
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 120.26.221.204 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
120.26.221.204 was first reported on
June 13th 2026 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇱
spd.co.il
2026-06-15 21:01:52
(6 days ago)
Port scan detected on multiple ports
Port Scan
🇪🇸
el-brujo
2026-06-14 00:43:00
(1 week ago)
Cloudflare WAF: Request Path: /phpMyAdmin/ Request Query: Host: foro.elhacker.net:8443 userAgent: M ...
show more
Cloudflare WAF: Request Path: /phpMyAdmin/ Request Query: Host: foro.elhacker.net:8443 userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Action: block Source: ratelimit ASN Description: Hangzhou Alibaba Advertising Co.,Ltd. Country: CN Method: GET Timestamp: 2026-06-14T00:43:00Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇳🇱
Roderic
2026-06-13 23:19:47
(1 week ago)
*Port Scan* detected from 120.26.221.204 (CN/China/Zhejiang/Hangzhou/-/[redacted]).
Port Scan
🇪🇸
robotstxt
2026-06-13 21:19:06
(1 week ago)
120.26.221.204 - - [13/Jun/2026:21:18:33 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 78316 "-" "Mozilla/5 ...
show more
120.26.221.204 - - [13/Jun/2026:21:18:33 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 78316 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" "-"
120.26.221.204 - - [13/Jun/2026:21:18:33 +0000] "GET /pma/ HTTP/1.1" 404 78316 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-"
120.26.221.204 - - [13/Jun/2026:21:18:33 +0000] "GET /phpMyAdmin/ HTTP/1.1" 404 78316 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-"
120.26.221.204 - - [13/Jun/2026:21:18:35 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 78316 "http://tuforodebolsa.com/phpmyadmin/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-"
120.26.221.204 - - [13/Jun/2026:21:18:35 +0000] "GET /phpMyAdmin/ HTTP/1.1" 404 78331 "http://tuforodebolsa.com/phpMyAdmin/"
...
show less
Bad Web Bot
🇳🇱
i-turnradio.nl
2026-06-13 21:18:03
(1 week ago)
2026-06-13 @ 23:18:02 (CET) ~ Blocked for trying to access: /phpMyAdmin/
Web App Attack
🇪🇸
ofimare
2026-06-13 20:37:55
(1 week ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot
🇧🇷
dominioz
2026-06-13 18:45:14
(1 week ago)
2026-06-13 18:44:37 GET /pma/ - - 120.26.221.204 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+15_ ...
show more
2026-06-13 18:44:37 GET /pma/ - - 120.26.221.204 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+15_0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/140.0.0.0+Safari/537.36 - 404 5286
2026-06-13 18:44:38 GET /pma/ - - 120.26.221.204 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.6+Safari/605.1.15 http://controle.dominioz.com.br/pma/ 404 5286
2026-06-13 18:44:38 GET /phpMyAdmin/ - - 120.26.221.204 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+15_0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/140.0.0.0+Safari/537.36 http://controle.dominioz.com.br/phpMyAdmin/ 404 5300
2026-06-13 18:44:40 GET /phpmyadmin/ - - 120.26.221.204 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.6+Safari/605.1.15 - 404 5300
...
show less
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: