High Risk
IP 120.27.122.60 rated at threat level 8/10 based on 6 security reports.
Pattern analysis reveals concerning activity. Confidence: 0%.
More threatening than 85% of monitored IPs
IP Address
120.27.122.60
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Hangzhou Alibaba Advertis...
ASN 37963
6
Reports
Honeypot
Data Source
Threat Categories
SSH
6
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 37963) with generally good reputation. The ISP Hangzhou Alibaba Advertising Co.,Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
27. Aug 2025 - 27. Nov 2025
0%
Current
Stable
Trend
Security Reports (6)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 120.27.122.60
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS37963
- ISP
- Hangzhou Alibaba Advertising Co.,Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 6
- First Reported
- 27 Aug 2025
- Last Reported
- 27 Nov 2025, 21:13
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37963
Hangzhou Alibaba Advertising Co.,Ltd.
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
616
Total IPs Monitored
5,895
Total Reports
9.6
Reports per IP
Network Context
This IP address belongs to Hangzhou Alibaba Advertising Co.,Ltd. (AS37963), which manages 616 IP addresses in our monitoring system. Out of these, 5,895 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 807,429 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
6
avg: 9
-
Network Comparison
Compared against 1,657 IPs in ASN 37963
Threat Level
8/10
network avg: 7.5
=
Total Reports
6
network avg: 7
=
Network Hangzhou Alibaba Advertising Co.,Ltd. has overall threat level 3/10
Geographic Comparison
Compared against 44,808 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
6
country avg: 5
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
734,114 threat incidents tracked globally • Last 24h: 28,054 Logs
FEED
Top Threat Sources
-
01
United States143,446 19.5% -
02
Brazil110,780 15.1%
-
03
India82,182 11.2%
-
04
China44,796 6.1%
-
05
SC29,234 4%
-
06
Germany17,510 2.4%
-
07
Netherlands17,489 2.4%
-
08
Pakistan16,657 2.3%
-
09
Argentina16,191 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
10/10
Avg Threat
87%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
112.124.56.100
10/10
Confidence
94%
Reports
43
Location
CN
CN
39.107.136.130
10/10
Confidence
94%
Reports
15
Location
CN
CN
106.15.236.209
10/10
Confidence
92%
Reports
16
Location
CN
CN
112.124.97.58
10/10
Confidence
91%
Reports
35
Location
CN
CN
120.27.122.227
10/10
Confidence
90%
Reports
14
Location
CN
CN
121.40.161.223
10/10
Confidence
88%
Reports
29
Location
CN
CN
101.132.98.86
10/10
Confidence
88%
Reports
26
Location
CN
CN
139.196.205.130
10/10
Confidence
88%
Reports
23
Location
CN
CN
139.224.136.217
10/10
Confidence
87%
Reports
78
Location
CN
CN
101.133.231.65
10/10
Confidence
86%
Reports
86
Location
CN
CN
106.14.238.41
10/10
Confidence
86%
Reports
47
Location
CN
CN
182.92.202.149
10/10
Confidence
86%
Reports
16
Location
CN
CN
118.31.10.104
10/10
Confidence
85%
Reports
34
Location
CN
CN
39.107.142.38
10/10
Confidence
85%
Reports
11
Location
CN
CN
106.14.123.114
10/10
Confidence
84%
Reports
82
Location
CN
CN
120.76.143.87
10/10
Confidence
84%
Reports
44
Location
CN
CN
47.95.234.23
10/10
Confidence
84%
Reports
36
Location
CN
CN
139.224.207.97
10/10
Confidence
84%
Reports
19
Location
CN
CN
112.124.16.184
10/10
Confidence
83%
Reports
97
Location
CN
CN
114.55.3.204
10/10
Confidence
83%
Reports
61
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
90%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
202.101.144.44
10/10
Confidence
100%
Reports
16
ISP
Chinanet
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
203.56.198.45
10/10
Confidence
99%
Reports
26
ISP
Sichuan Chuanxn...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
101.96.214.98
10/10
Confidence
98%
Reports
14
ISP
Beijing Volcano...