JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.26.48.227

120.26.48.227 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 0%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.26.48.227

Whois 120.26.48.227

IP Abuse Reports for 120.26.48.227:

This IP address has been reported a total of 224 times from 110 distinct sources. 120.26.48.227 was first reported on February 4th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇳 Public CSIRT/CC of Mongolia	2025-12-13 03:56:45 (6 months ago)	Honeypot hit: Empty payload (likely service probe); 22222 [1] TCP	Port Scan
🇨🇳 ThreatBook.io	2025-12-12 23:07:00 (6 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/120.26.48.227	Brute-Force
🇬🇧 [email protected]	2025-12-11 00:38:37 (6 months ago)	...	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-12-10 23:09:09 (6 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/120.26.48.227	Brute-Force
🇧🇪 sid3windr	2025-12-10 18:47:14 (6 months ago)	SSH port scan (Tarpitted for 20s, wasted 29B)	Port Scan SSH
🇩🇪 zlydnev.online	2025-12-10 14:55:08 (6 months ago)	2025-12-10T17:54:55.119707+03:00 zlydnev sshd[2923634]: pam_unix(sshd:auth): authentication failure; ... show more 2025-12-10T17:54:55.119707+03:00 zlydnev sshd[2923634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-10T17:54:57.132242+03:00 zlydnev sshd[2923634]: Failed password for root from 120.26.48.227 port 52414 ssh2 2025-12-10T17:55:02.654897+03:00 zlydnev sshd[2923636]: Connection from 120.26.48.227 port 52436 on 109.120.139.56 port 22 rdomain "" 2025-12-10T17:55:05.562640+03:00 zlydnev sshd[2923636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-10T17:55:07.615104+03:00 zlydnev sshd[2923636]: Failed password for root from 120.26.48.227 port 52436 ssh2 ... show less	Brute-Force SSH
🇩🇪 london2038.com	2025-12-10 13:15:54 (6 months ago)	Unsolicited connect to 2222/TCP 2025-12-10 14:15:16.043558741 +0100 CET, 120.26.48.227:39338, closi ... show more Unsolicited connect to 2222/TCP 2025-12-10 14:15:16.043558741 +0100 CET, 120.26.48.227:39338, closing 2025-12-10 14:15:17.195730093 +0100 CET, 120.26.48.227:39348, closing show less	Port Scan SSH
🇯🇵 zwh	2025-12-09 17:57:20 (6 months ago)	SSH Brute-Force	Brute-Force SSH
🇺🇸 timsan	2025-12-09 10:07:53 (6 months ago)	2025-12-09T02:07:47.222675-08:00 oef sshd-session[67772]: Failed password for root from 120.26.48.22 ... show more 2025-12-09T02:07:47.222675-08:00 oef sshd-session[67772]: Failed password for root from 120.26.48.227 port 48638 ssh2 2025-12-09T02:07:50.409267-08:00 oef sshd-session[67775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-09T02:07:52.472349-08:00 oef sshd-session[67775]: Failed password for root from 120.26.48.227 port 48642 ssh2 ... show less	Brute-Force SSH
🇩🇪 Axel	2025-12-07 11:58:52 (6 months ago)	[2025-12-07 11:58:52 UTC] Honeypot SSH connection attempt \| AXFRA HONEYPOT	SSH
🇫🇷 geeek	2025-12-06 23:17:22 (6 months ago)	Port scanning: 2222 TCP Blocked	Port Scan
🇮🇹 opso.it	2025-12-06 18:46:06 (6 months ago)	Dec 6 19:45:56 OPSO sshd\[26959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ... show more Dec 6 19:45:56 OPSO sshd\[26959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root Dec 6 19:45:58 OPSO sshd\[26959\]: Failed password for root from 120.26.48.227 port 34036 ssh2 Dec 6 19:46:01 OPSO sshd\[26962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root Dec 6 19:46:03 OPSO sshd\[26962\]: Failed password for root from 120.26.48.227 port 40144 ssh2 Dec 6 19:46:05 OPSO sshd\[26984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root show less	SSH
🇩🇪 hserv	2025-12-06 02:57:31 (6 months ago)	2025-12-06T03:57:18.799891chnode7 sshd[2941704]: Failed password for root from 120.26.48.227 port 60 ... show more 2025-12-06T03:57:18.799891chnode7 sshd[2941704]: Failed password for root from 120.26.48.227 port 60472 ssh2 2025-12-06T03:57:23.162557chnode7 sshd[2942101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-06T03:57:25.357229chnode7 sshd[2942101]: Failed password for root from 120.26.48.227 port 60482 ssh2 2025-12-06T03:57:28.964102chnode7 sshd[2942919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-06T03:57:30.510751chnode7 sshd[2942919]: Failed password for root from 120.26.48.227 port 56698 ssh2 ... show less	Brute-Force SSH
🇺🇸 Xarcotic	2025-12-05 10:48:19 (6 months ago)	SSH login on honeypot.	Brute-Force SSH
🇩🇪 Henriks9	2025-12-05 09:02:40 (6 months ago)	2025-12-05T10:02:34.322241+01:00 ns3136794 sshd[1502895]: Failed password for root from 120.26.48.22 ... show more 2025-12-05T10:02:34.322241+01:00 ns3136794 sshd[1502895]: Failed password for root from 120.26.48.227 port 43704 ssh2 2025-12-05T10:02:36.996658+01:00 ns3136794 sshd[1517122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.26.48.227 user=root 2025-12-05T10:02:39.584853+01:00 ns3136794 sshd[1517122]: Failed password for root from 120.26.48.227 port 44822 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c07::12a

🇩🇪 213.209.159.175

🇧🇷 170.80.60.127

🇨🇳 119.249.100.108

🇫🇷 91.231.89.51

🇮🇷 85.198.19.253

🇬🇧 81.19.219.224

🇺🇸 57.141.0.1

🇨🇦 20.116.27.239

🇺🇸 20.9.89.39

🇺🇸 2604:a880:400:d1:0:4:9e90:8001

🇪🇨 191.99.31.106

🇺🇸 184.154.156.13

🇮🇩 180.248.199.96

🇨🇳 123.232.133.193

🇷🇺 87.242.123.186

🇸🇨 45.194.67.28

🇸🇬 8.222.236.31

🇭🇰 223.197.186.7

🇦🇷 190.2.103.216