Extreme Threat
IP 120.26.220.254 classified at threat level 10/10 with 8 documented attacks.
Advanced threat indicators confirmed with 65% certainty.
More threatening than 98% of monitored IPs
IP Address
120.26.220.254
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
China
Location
Hangzhou Alibaba Advertis...
ASN 37963
8
Reports
Mixed
Data Source
Threat Categories
Hacking
7
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
1. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 37963) with generally good reputation. The ISP Hangzhou Alibaba Advertising Co.,Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
65%
High Confidence
Confidence History
31. May 2026 - 1. Oct 2026
65%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 120.26.220.254
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS37963
- ISP
- Hangzhou Alibaba Advertising Co.,Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 8
- First Reported
- 31 May 2026
- Last Reported
- 1 Oct 2026, 08:18
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37963
Hangzhou Alibaba Advertising Co.,Ltd.
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
616
Total IPs Monitored
5,895
Total Reports
9.6
Reports per IP
Network Context
This IP address belongs to Hangzhou Alibaba Advertising Co.,Ltd. (AS37963), which manages 616 IP addresses in our monitoring system. Out of these, 5,895 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,561 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
8
avg: 9
=
Network Comparison
Compared against 1,777 IPs in ASN 37963
Threat Level
10/10
network avg: 7.4
+
Total Reports
8
network avg: 6
+
Network Hangzhou Alibaba Advertising Co.,Ltd. has overall threat level 3/10
Geographic Comparison
Compared against 46,061 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
8
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 Sep 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Sunday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
7
SSH
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
756,872 threat incidents tracked globally • Last 24h: 29,621 Logs
FEED
Top Threat Sources
-
01
United States148,132 19.6% -
02
Brazil111,841 14.8%
-
03
India87,172 11.5%
-
04
China46,061 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,367 2.4%
-
07
Netherlands17,978 2.4%
-
08
Pakistan17,804 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
84%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
112.124.56.100
10/10
Confidence
94%
Reports
66
Location
CN
CN
112.124.16.254
10/10
Confidence
94%
Reports
26
Location
CN
CN
47.112.14.15
10/10
Confidence
92%
Reports
10
Location
CN
CN
39.107.136.130
10/10
Confidence
91%
Reports
15
Location
CN
CN
106.15.236.209
10/10
Confidence
87%
Reports
17
Location
CN
CN
47.95.234.23
8/10
Confidence
85%
Reports
39
Location
CN
CN
39.107.142.38
10/10
Confidence
85%
Reports
12
Location
CN
CN
139.224.136.217
10/10
Confidence
84%
Reports
78
Location
CN
CN
39.100.183.18
8/10
Confidence
84%
Reports
23
Location
CN
CN
101.133.231.65
10/10
Confidence
83%
Reports
86
Location
CN
CN
106.14.238.41
10/10
Confidence
83%
Reports
47
Location
CN
CN
106.14.123.114
10/10
Confidence
81%
Reports
83
Location
CN
CN
112.124.16.184
10/10
Confidence
80%
Reports
97
Location
CN
CN
121.40.217.100
10/10
Confidence
80%
Reports
71
Location
CN
CN
106.14.14.65
10/10
Confidence
80%
Reports
66
Location
CN
CN
39.104.64.139
10/10
Confidence
80%
Reports
39
Location
CN
CN
120.27.122.227
10/10
Confidence
80%
Reports
14
Location
CN
CN
116.62.152.62
10/10
Confidence
79%
Reports
61
Location
CN
CN
39.98.173.163
8/10
Confidence
79%
Reports
51
Location
CN
CN
182.92.202.149
10/10
Confidence
79%
Reports
16
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
ISP
Chinanet
211.101.247.196
10/10
Confidence
100%
Reports
28
ISP
Cloud Computing...
118.121.202.149
10/10
Confidence
100%
Reports
21
ISP
CHINANET SiChua...
27.155.120.131
10/10
Confidence
100%
Reports
20
ISP
Fuzhou
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
112.123.228.180
10/10
Confidence
100%
Reports
18
ISP
CHINA UNICOM Ch...
118.145.246.44
10/10
Confidence
100%
Reports
18
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
15
ISP
China Networks ...
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
120.48.170.74
10/10
Confidence
100%
Reports
14
ISP
Beijing Baidu N...
220.250.52.101
8/10
Confidence
100%
Reports
14
ISP
CHINA UNICOM Ch...
117.50.70.169
8/10
Confidence
100%
Reports
13
ISP
China Unicom Be...
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
14.103.110.123
10/10
Confidence
100%
Reports
13
ISP
China Telecom G...
203.56.198.45
10/10
Confidence
99%
Reports
30
ISP
Sichuan Chuanxn...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
65%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
216.234.213.150
10/10
Confidence
65%
Reports
5
Location
ZM
ZM
182.182.227.65
10/10
Confidence
65%
Reports
5
Location
PK
PK
2401:4900:1c09:f328:e575:495d:f6fe:1133
10/10
Confidence
65%
Reports
5
Location
IN
IN
180.72.218.209
10/10
Confidence
65%
Reports
6
Location
MY
MY
103.214.226.46
10/10
Confidence
65%
Reports
5
Location
IN
IN
125.62.196.69
10/10
Confidence
65%
Reports
6
Location
IN
IN
2400:adcc:10e:3000:8018:640e:aad9:82f7
10/10
Confidence
65%
Reports
5
Location
PK
PK
223.184.168.141
10/10
Confidence
65%
Reports
5
Location
IN
IN
119.73.102.201
10/10
Confidence
65%
Reports
5
Location
PK
PK
117.195.196.86
10/10
Confidence
65%
Reports
5
Location
IN
IN
39.48.81.235
10/10
Confidence
65%
Reports
5
Location
PK
PK
103.161.99.74
10/10
Confidence
65%
Reports
6
Location
IN
IN
2001:1a40:1410:9100:44fe:6270:3f1f:4a7d
10/10
Confidence
65%
Reports
5
Location
BH
BH
103.158.140.36
10/10
Confidence
65%
Reports
5
Location
IN
IN
2001:e68:7f4e:1b00:ca5:7393:cf21:4988
10/10
Confidence
65%
Reports
6
Location
MY
MY