2.26.120.157
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Frankfurt, Germany
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS215103
- Domain Name
- zonavps.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
24 from
24 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 syscfg |
Cowrie SSH honeypot: 974 attempt(s) from 2.26.120.157. Period: 2026-11-08T22:05:52 to 2026-11-08T22:15:16 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
|
Brute-Force SSH | |
| 🇦🇹 joe-abuse |
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (23/tcp); first 2026-11-08 21:51:59 UTC, last 2026-11-08 21:51:59 UTC. Reported by ipdb-security/fitzgerald.eu
|
Port Scan IoT Targeted | |
| 🇩🇪 FDC |
Malicious activity from 2.26.120.157 detected by FDC honeypots. Categories: 14,15,20,22. 68 events in last 24h.
|
Port Scan Hacking Exploited Host SSH | |
| 🇵🇱 vrozaksen |
SSH/Telnet honeypot caught this host: 1 login attempts, 80 commands executed, 1 payload fetches. Last seen 2026-11-08T22:05:57Z.
|
Hacking Brute-Force Exploited Host SSH IoT Targeted | |
| 🇺🇸 Wootroot |
Honeypot (telnet): 1 login attempts
|
Brute-Force IoT Targeted | |
| 🇩🇪 goodbytes |
|
Brute-Force IoT Targeted Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 863 telnet brute-force attempts over the last 24h (latest 2026-11-08T22:14Z).
|
Brute-Force IoT Targeted | |
| 🇺🇸 wristhulk |
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'root' Password: ''.
|
Brute-Force IoT Targeted | |
| 🇺🇸 danielg9786 |
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-11-08T22:06:59Z and 2026-11-08T22:13:17Z
|
Brute-Force SSH | |
| Anonymous |
Malware payload written over SSH: 'run.sh' (2 KB), SHA256: 62e1130f9d8874273f52380b4ac35da9706b610e8b44ee832eef0ba7ebd1c062.
|
Hacking SSH | |
| 🇸🇬 ksi_digital |
|
Brute-Force IoT Targeted | |
| 🇫🇷 [email protected] |
Telnet brute-force: 2 login attempts over 2 connections in 2 min. After logging in it ran 160 shell commands.
|
Brute-Force IoT Targeted | |
| 🇸🇪 paardappel |
Repeated SSH/Telnet login attempts (3+ in one day) against a honeypot
|
Brute-Force SSH | |
| 🇫🇮 YaRi78 |
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-08T22:06:58Z and 2026-11-08T22:06:58Z
|
Brute-Force SSH | |
| 🇺🇦 tank.zone |
Honeypot (Cowrie SSH/Telnet + HTTP trap): 1 SSH/Telnet login attempts, ran 80 shell commands, downloaded 1 malware sample(s).
|
Hacking Brute-Force Exploited Host SSH IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown