IP address

Search at other sites:

.000120.26.52.85

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus PBL

120.26.52.85 is listed on the Spamhaus PBL blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-06 05:17:41.340000
Was present on blacklist at: 2025-02-11 05:22, 2025-02-18 05:19, 2025-02-25 05:17, 2025-03-04 05:19, 2025-03-11 05:19, 2025-03-18 05:17, 2025-03-25 05:20, 2025-04-01 05:10, 2025-04-08 05:15, 2025-04-15 05:18, 2025-04-22 05:14, 2025-04-29 05:26, 2025-05-06 05:17

Blocklist.net.ua

120.26.52.85 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-28 10:15:02.277000
Was present on blacklist at: 2025-02-06 07:15, 2025-02-06 11:15, 2025-02-06 15:15, 2025-02-06 19:15, 2025-02-06 23:15, 2025-02-07 03:15, 2025-02-07 07:15, 2025-02-07 11:15, 2025-02-07 15:15, 2025-02-07 19:15, 2025-02-07 23:15, 2025-02-08 03:15, 2025-02-08 07:15, 2025-02-08 11:15, 2025-02-08 15:15, 2025-02-08 19:15, 2025-02-08 23:15, 2025-02-09 03:15, 2025-02-09 07:15, 2025-02-09 11:15, 2025-02-09 15:15, 2025-02-09 19:15, 2025-02-09 23:15, 2025-02-10 03:15, 2025-02-10 07:15, 2025-02-10 11:15, 2025-02-10 15:15, 2025-02-10 19:15, 2025-02-10 23:15, 2025-02-11 03:15, 2025-02-11 07:15, 2025-02-11 11:15, 2025-02-11 15:15, 2025-02-11 19:15, 2025-02-11 23:15, 2025-02-12 03:15, 2025-02-12 07:15, 2025-02-12 11:15, 2025-02-12 15:15, 2025-02-12 19:15, 2025-02-12 23:15, 2025-02-13 03:15, 2025-02-13 07:15, 2025-02-13 11:15, 2025-02-13 15:15, 2025-02-13 19:15, 2025-02-13 23:15, 2025-02-14 03:15, 2025-02-14 07:15, 2025-02-14 11:15, 2025-02-14 15:15, 2025-02-14 19:15, 2025-02-14 23:15, 2025-02-15 03:15, 2025-02-15 07:15, 2025-02-15 11:15, 2025-02-15 15:15, 2025-02-15 19:15, 2025-02-15 23:15, 2025-02-16 03:15, 2025-02-16 07:15, 2025-02-16 11:15, 2025-02-16 15:15, 2025-02-16 19:15, 2025-02-16 23:15, 2025-02-17 03:15, 2025-02-17 07:15, 2025-02-17 11:15, 2025-02-17 15:15, 2025-02-17 19:15, 2025-02-17 23:15, 2025-02-18 03:15, 2025-02-18 07:15, 2025-02-18 11:15, 2025-02-18 15:15, 2025-02-18 19:15, 2025-02-18 23:15, 2025-02-19 03:15, 2025-02-19 07:15, 2025-02-19 11:15, 2025-02-19 15:15, 2025-02-19 19:15, 2025-02-19 23:15, 2025-02-20 03:15, 2025-02-20 07:15, 2025-02-20 11:15, 2025-02-20 15:15, 2025-02-20 19:15, 2025-02-20 23:15, 2025-02-21 03:15, 2025-02-21 07:15, 2025-02-21 11:15, 2025-02-21 15:15, 2025-02-21 19:15, 2025-02-21 23:15, 2025-02-22 03:15, 2025-02-22 07:15, 2025-02-22 11:15, 2025-02-22 15:15, 2025-02-22 19:15, 2025-02-22 23:15, 2025-02-23 03:15, 2025-02-23 07:15, 2025-02-23 11:15, 2025-02-23 15:15, 2025-02-23 19:15, 2025-02-23 23:15, 2025-02-24 03:15, 2025-02-24 07:15, 2025-02-24 11:15, 2025-02-24 15:15, 2025-02-24 19:15, 2025-02-24 23:15, 2025-02-25 03:15, 2025-02-25 07:15, 2025-02-25 11:15, 2025-02-25 15:15, 2025-02-25 19:15, 2025-02-25 23:15, 2025-02-26 03:15, 2025-02-26 07:15, 2025-02-26 11:15, 2025-02-27 07:15, 2025-02-27 11:15, 2025-02-27 15:15, 2025-02-27 19:15, 2025-02-27 23:15, 2025-02-28 03:15, 2025-03-11 15:15, 2025-03-11 19:15, 2025-03-11 23:15, 2025-03-12 03:15, 2025-03-12 07:15, 2025-03-12 11:15, 2025-04-10 06:15, 2025-04-10 10:15, 2025-04-10 14:15, 2025-04-10 18:15, 2025-04-10 22:15, 2025-04-11 02:15, 2025-04-27 14:15, 2025-04-27 18:15, 2025-04-27 22:15, 2025-04-28 02:15, 2025-04-28 06:15, 2025-04-28 10:15

blocklist.de SSH

120.26.52.85 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-26 16:05:05.328000
Was present on blacklist at: 2025-02-06 11:05, 2025-02-06 17:05, 2025-02-06 23:05, 2025-02-07 05:05, 2025-02-07 11:05, 2025-02-07 17:05, 2025-02-07 23:05, 2025-02-08 05:05, 2025-02-08 11:05, 2025-02-11 23:05, 2025-02-12 05:05, 2025-02-12 11:05, 2025-02-12 17:05, 2025-02-12 23:05, 2025-02-13 05:05, 2025-02-13 11:05, 2025-02-13 17:05, 2025-02-13 23:05, 2025-02-14 05:05, 2025-02-14 11:05, 2025-02-14 17:05, 2025-02-14 23:05, 2025-03-11 23:05, 2025-03-12 05:05, 2025-03-12 11:05, 2025-03-12 17:05, 2025-03-12 23:05, 2025-03-13 05:05, 2025-03-13 11:05, 2025-03-13 17:05, 2025-03-13 23:05, 2025-03-14 05:05, 2025-03-14 11:05, 2025-03-14 17:05, 2025-03-14 23:05, 2025-03-15 05:05, 2025-03-15 11:05, 2025-03-18 23:05, 2025-03-19 05:05, 2025-03-19 11:05, 2025-03-19 17:05, 2025-03-19 23:05, 2025-03-20 05:05, 2025-03-20 11:05, 2025-03-20 17:05, 2025-03-26 23:05, 2025-03-27 05:05, 2025-03-27 11:05, 2025-03-27 17:05, 2025-03-27 23:05, 2025-03-28 05:05, 2025-03-28 11:05, 2025-03-28 17:05, 2025-04-03 16:05, 2025-04-03 22:05, 2025-04-04 04:05, 2025-04-04 10:05, 2025-04-04 16:05, 2025-04-04 22:05, 2025-04-05 04:05, 2025-04-05 10:05, 2025-04-06 04:05, 2025-04-06 10:05, 2025-04-06 16:05, 2025-04-06 22:05, 2025-04-07 04:05, 2025-04-07 10:05, 2025-04-07 16:05, 2025-04-07 22:05, 2025-04-08 16:05, 2025-04-08 22:05, 2025-04-09 04:05, 2025-04-09 10:05, 2025-04-09 16:05, 2025-04-09 22:05, 2025-04-10 04:05, 2025-04-10 10:05, 2025-04-21 04:05, 2025-04-21 10:05, 2025-04-21 16:05, 2025-04-21 22:05, 2025-04-22 04:05, 2025-04-22 10:05, 2025-04-22 16:05, 2025-04-22 22:05, 2025-04-24 10:05, 2025-04-24 22:05, 2025-04-25 04:05, 2025-04-25 10:05, 2025-04-25 16:05, 2025-04-25 22:05, 2025-04-26 04:05, 2025-04-26 10:05, 2025-04-26 16:05

DataPlane SSH conn

120.26.52.85 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-02-20 07:10:01.808000
Was present on blacklist at: 2025-02-08 07:10, 2025-02-08 11:10, 2025-02-08 15:10, 2025-02-08 19:10, 2025-02-08 23:10, 2025-02-09 03:10, 2025-02-09 07:10, 2025-02-09 11:10, 2025-02-09 15:10, 2025-02-09 19:10, 2025-02-09 23:10, 2025-02-10 03:10, 2025-02-10 07:10, 2025-02-10 11:10, 2025-02-10 15:10, 2025-02-10 19:10, 2025-02-10 23:10, 2025-02-11 03:10, 2025-02-11 07:10, 2025-02-11 11:10, 2025-02-11 15:10, 2025-02-11 19:10, 2025-02-11 23:10, 2025-02-12 03:10, 2025-02-12 07:10, 2025-02-12 11:10, 2025-02-12 15:10, 2025-02-12 19:10, 2025-02-12 23:10, 2025-02-13 03:10, 2025-02-13 07:10, 2025-02-13 11:10, 2025-02-13 15:10, 2025-02-13 19:10, 2025-02-13 23:10, 2025-02-14 03:10, 2025-02-14 07:10, 2025-02-14 11:10, 2025-02-14 15:10, 2025-02-14 19:10, 2025-02-14 23:10, 2025-02-15 03:10, 2025-02-15 07:10, 2025-02-15 11:10, 2025-02-15 15:10, 2025-02-15 19:10, 2025-02-15 23:10, 2025-02-16 03:10, 2025-02-16 07:10, 2025-02-16 11:10, 2025-02-16 15:10, 2025-02-16 19:10, 2025-02-16 23:10, 2025-02-17 03:10, 2025-02-17 07:10, 2025-02-17 11:10, 2025-02-17 15:10, 2025-02-17 19:10, 2025-02-17 23:10, 2025-02-18 03:10, 2025-02-18 07:10, 2025-02-18 11:10, 2025-02-18 15:10, 2025-02-18 19:10, 2025-02-18 23:10, 2025-02-19 03:10, 2025-02-19 07:10, 2025-02-19 11:10, 2025-02-19 15:10, 2025-02-19 19:10, 2025-02-19 23:10, 2025-02-20 03:10, 2025-02-20 07:10

AbuseIPDB

120.26.52.85 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-21 04:00:00.746000
Was present on blacklist at: 2025-02-13 05:00, 2025-03-01 05:00, 2025-03-03 05:00, 2025-03-09 05:00, 2025-03-12 05:00, 2025-03-13 05:00, 2025-03-14 05:00, 2025-03-27 05:00, 2025-04-09 04:00, 2025-04-21 04:00

DataPlane SSH login

120.26.52.85 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-13 06:10:02.091000
Was present on blacklist at: 2025-02-20 11:10, 2025-02-20 15:10, 2025-02-20 19:10, 2025-02-20 23:10, 2025-02-21 03:10, 2025-02-21 07:10, 2025-02-21 11:10, 2025-02-21 15:10, 2025-02-21 19:10, 2025-02-21 23:10, 2025-02-22 03:10, 2025-02-22 07:10, 2025-02-22 11:10, 2025-02-22 15:10, 2025-02-22 19:10, 2025-02-22 23:10, 2025-02-23 03:10, 2025-02-23 07:10, 2025-02-23 11:10, 2025-02-23 15:10, 2025-02-23 19:10, 2025-02-23 23:10, 2025-02-24 03:10, 2025-02-24 07:10, 2025-02-24 11:10, 2025-02-24 15:10, 2025-02-24 19:10, 2025-02-24 23:10, 2025-02-25 03:10, 2025-02-25 07:10, 2025-02-25 11:10, 2025-02-25 15:10, 2025-02-25 19:10, 2025-02-25 23:10, 2025-02-26 03:10, 2025-02-26 07:10, 2025-02-26 11:10, 2025-02-26 15:10, 2025-02-26 19:10, 2025-02-26 23:10, 2025-02-27 03:10, 2025-02-27 07:10, 2025-02-27 11:10, 2025-02-27 15:10, 2025-02-27 19:10, 2025-02-27 23:10, 2025-02-28 03:10, 2025-02-28 07:10, 2025-02-28 11:10, 2025-02-28 15:10, 2025-02-28 19:10, 2025-02-28 23:10, 2025-03-01 03:10, 2025-03-01 07:10, 2025-03-01 11:10, 2025-03-01 15:10, 2025-03-01 19:10, 2025-03-01 23:10, 2025-03-21 11:10, 2025-03-21 15:10, 2025-03-21 19:10, 2025-03-21 23:10, 2025-03-22 03:10, 2025-03-22 07:10, 2025-03-22 11:10, 2025-03-22 15:10, 2025-03-22 19:10, 2025-03-22 23:10, 2025-03-23 03:10, 2025-03-23 07:10, 2025-03-23 11:10, 2025-03-23 15:10, 2025-03-23 19:10, 2025-03-23 23:10, 2025-03-24 03:10, 2025-03-24 07:10, 2025-03-24 11:10, 2025-03-24 15:10, 2025-03-24 19:10, 2025-03-24 23:10, 2025-03-25 03:10, 2025-03-25 07:10, 2025-03-25 11:10, 2025-03-25 15:10, 2025-03-25 19:10, 2025-03-25 23:10, 2025-03-26 03:10, 2025-03-26 07:10, 2025-03-26 11:10, 2025-03-26 15:10, 2025-03-26 19:10, 2025-03-26 23:10, 2025-03-27 03:10, 2025-03-27 07:10, 2025-03-27 11:10, 2025-03-27 15:10, 2025-03-27 19:10, 2025-04-06 18:10, 2025-04-06 22:10, 2025-04-07 02:10, 2025-04-07 06:10, 2025-04-07 10:10, 2025-04-07 14:10, 2025-04-07 18:10, 2025-04-07 22:10, 2025-04-08 02:10, 2025-04-08 06:10, 2025-04-08 10:10, 2025-04-08 14:10, 2025-04-08 18:10, 2025-04-08 22:10, 2025-04-09 02:10, 2025-04-09 06:10, 2025-04-09 10:10, 2025-04-09 14:10, 2025-04-09 18:10, 2025-04-09 22:10, 2025-04-10 02:10, 2025-04-10 06:10, 2025-04-10 10:10, 2025-04-10 14:10, 2025-04-10 18:10, 2025-04-10 22:10, 2025-04-11 02:10, 2025-04-11 06:10, 2025-04-11 10:10, 2025-04-11 14:10, 2025-04-11 18:10, 2025-04-11 22:10, 2025-04-12 02:10, 2025-04-12 06:10, 2025-04-12 10:10, 2025-04-12 14:10, 2025-04-12 18:10, 2025-04-12 22:10, 2025-04-13 02:10, 2025-04-13 06:10

blocklist.de FTP

120.26.52.85 is listed on the blocklist.de FTP blacklist.

Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service FTP.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-24 16:05:00.214000
Was present on blacklist at: 2025-03-04 17:05, 2025-03-04 23:05, 2025-03-05 05:05, 2025-03-05 11:05, 2025-03-05 17:05, 2025-03-05 23:05, 2025-03-06 05:05, 2025-03-06 11:05, 2025-04-24 16:05

Warden events (2)

2025-04-08

IntrusionUserCompromise (node.40929a): 1

2025-02-06

IntrusionUserCompromise (node.40929a): 1

DShield reports (IP summary, reports)

2025-02-06

Number of reports: 141

Distinct targets: 4

2025-02-07

Number of reports: 254

Distinct targets: 9

2025-02-08

Number of reports: 162

Distinct targets: 6

2025-02-09

Number of reports: 421

Distinct targets: 6

2025-02-10

Number of reports: 399

Distinct targets: 5

2025-02-11

Number of reports: 600

Distinct targets: 8

2025-02-12

Number of reports: 5390

Distinct targets: 4

2025-02-13

Number of reports: 796

Distinct targets: 4

2025-02-14

Number of reports: 232

Distinct targets: 6

2025-02-15

Number of reports: 36

Distinct targets: 3

2025-02-16

Number of reports: 166

Distinct targets: 7

2025-02-17

Number of reports: 524

Distinct targets: 6

2025-02-18

Number of reports: 118

Distinct targets: 4

2025-02-19

Number of reports: 202

Distinct targets: 4

2025-02-20

Number of reports: 255

Distinct targets: 4

2025-02-21

Number of reports: 488

Distinct targets: 9

2025-02-22

Number of reports: 252

Distinct targets: 10

2025-02-24

Number of reports: 192

Distinct targets: 5

2025-02-26

Number of reports: 10

Distinct targets: 3

2025-02-27

Number of reports: 1128

Distinct targets: 8

2025-02-28

Number of reports: 35

Distinct targets: 5

2025-03-01

Number of reports: 181

Distinct targets: 4

2025-03-02

Number of reports: 543

Distinct targets: 5

2025-03-03

Number of reports: 760

Distinct targets: 7

2025-03-04

Number of reports: 1347

Distinct targets: 12

2025-03-05

Number of reports: 649

Distinct targets: 10

2025-03-06

Number of reports: 30

Distinct targets: 4

2025-03-07

Number of reports: 23

Distinct targets: 5

2025-03-08

Number of reports: 765

Distinct targets: 17

2025-03-09

Number of reports: 196

Distinct targets: 4

2025-03-10

Number of reports: 1608

Distinct targets: 15

2025-03-11

Number of reports: 550

Distinct targets: 13

2025-03-12

Number of reports: 502

Distinct targets: 13

2025-03-13

Number of reports: 704

Distinct targets: 13

2025-03-14

Number of reports: 90

Distinct targets: 4

2025-03-15

Number of reports: 19

Distinct targets: 3

2025-03-16

Number of reports: 1131

Distinct targets: 12

2025-03-17

Number of reports: 233

Distinct targets: 13

2025-03-18

Number of reports: 120

Distinct targets: 3

2025-03-19

Number of reports: 901

Distinct targets: 13

2025-03-20

Number of reports: 377

Distinct targets: 11

2025-03-21

Number of reports: 696

Distinct targets: 12

2025-03-22

Number of reports: 168

Distinct targets: 6

2025-03-23

Number of reports: 4150

Distinct targets: 4

2025-03-27

Number of reports: 553

Distinct targets: 12

2025-03-28

Number of reports: 499

Distinct targets: 11

2025-03-29

Number of reports: 643

Distinct targets: 10

2025-03-30

Number of reports: 1267

Distinct targets: 16

2025-03-31

Number of reports: 233

Distinct targets: 3

2025-04-01

Number of reports: 777

Distinct targets: 14

2025-04-02

Number of reports: 1106

Distinct targets: 13

2025-04-03

Number of reports: 149

Distinct targets: 9

2025-04-04

Number of reports: 607

Distinct targets: 10

2025-04-05

Number of reports: 659

Distinct targets: 12

2025-04-06

Number of reports: 204

Distinct targets: 9

2025-04-07

Number of reports: 237

Distinct targets: 6

2025-04-08

Number of reports: 901

Distinct targets: 13

2025-04-09

Number of reports: 587

Distinct targets: 8

2025-04-10

Number of reports: 1152

Distinct targets: 32

2025-04-11

Number of reports: 29

Distinct targets: 10

2025-04-13

Number of reports: 19

Distinct targets: 6

2025-04-14

Number of reports: 24

Distinct targets: 13

2025-04-15

Number of reports: 137

Distinct targets: 16

2025-04-16

Number of reports: 168

Distinct targets: 12

2025-04-19

Number of reports: 72

Distinct targets: 19

2025-04-20

Number of reports: 79

Distinct targets: 15

2025-04-21

Number of reports: 80

Distinct targets: 14

2025-04-23

Number of reports: 18

Distinct targets: 9

2025-04-24

Number of reports: 2044

Distinct targets: 72

2025-04-25

Number of reports: 1547

Distinct targets: 52

2025-04-26

Number of reports: 573

Distinct targets: 7

2025-04-27

Number of reports: 313

Distinct targets: 3

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

120.26.0.0/16

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

120.24.0.0 - 120.27.255.255

last_activity

2025-04-08 16:30:02.076000

last_warden_event

2025-04-08 16:30:02.076000

rep

0.0

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80

Tags: –

CPEs: cpe:/a:openbsd:openssh:8.0, cpe:/a:f5:nginx

ts_added

2024-10-01 05:10:39.491000

ts_last_update

2025-05-07 05:18:12.177000

Warden event timeline

DShield event timeline

Presence on blacklists