Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 22, 2026
120.26.139.175
IPv4AS37963 · ALIBABA-CN-NET - Hangzhou Alibaba Advertising Co.,Ltd., CN · 120.24.0.0/14 · CN registry
DNS history
Full relationships unavailable for this view
Network
AS37963 · 120.24.0.0/14
Exposure
Snapshot pending
Popularity
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Public feed matches
Honeypot infrastructure watch10/22/2026, 4:55:50 AM
Observed 30 times. Targeted ports: 22, 2222. Country: China. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, ET INFO SSH session in progress on Unusual Port, SURICATA STREAM spurious retransmission. Usernames: root.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 120.26.139.175 | ip | honeypot, historical | 2026-10-22 04:55:50 | |
Honeypot infrastructure watch: Observed 30 times. Targeted ports: 22, 2222. Country: China. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, ET INFO SSH session in progress on Unusual Port, SURICATA STREAM spurious retransmission. Usernames: root. | ||||
DNS history
0 observations
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|
No DNS history matches this value.
Network ownership
BGP origin and registry data from Team Cymru.
Origin ASN
AS37963
BGP prefix
120.24.0.0/14
Registry country
CN
ALIBABA-CN-NET - Hangzhou Alibaba Advertising Co.,Ltd., CN
Registry country is RIR assignment data, not IP geolocation.
Checked 10/22/2026, 4:56:01 AM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
Exposure data is being refreshed.
Public preview is limited to five services and excludes banners. Account research on this IP entity includes every cached service, exact timestamps, banners, and enrichment summaries.
Account research
Take this investigation further
1 public feed match. Account searches stay out of Latest searches.