JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

120.55.92.128

Recent Activity

Abuse confidence score ?

95% Critical

262 reports

83 reporters · latest 6 hours ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 120.55.92.128

This IP address has been reported a total of 262 times from 83 distinct sources. 120.55.92.128 was first reported on March 20th 2025, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: Turkey with 33 reports; United States of America with 16 reports; Germany with 7 reports. The most common categories in these recent reports were: Hacking 35 times; Web App Attack 33 times; Port Scan 28 times; Brute-Force 12 times; SSH 6 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-10-01 10:06:38 (6 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇨🇦 Blinker73	2026-10-01 04:52:48 (11 hours ago)	2026-10-01T00:52 kernel: OUT= SRC=120.55.92.128 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=10471 PRO ... show more 2026-10-01T00:52 kernel: OUT= SRC=120.55.92.128 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=10471 PROTO=TCP SPT=50362 DPT=50449 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T00:52 kernel: OUT= SRC=120.55.92.128 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=55256 PROTO=TCP SPT=50362 DPT=57211 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T00:52 kernel: OUT= SRC=120.55.92.128 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=7856 PROTO=TCP SPT=50362 DPT=64546 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 xavier-momain.eu	2026-09-30 23:24:27 (17 hours ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #4	Brute-Force SSH
🇺🇸 cazae	2026-09-30 17:57:53 (22 hours ago)	Unauthorized attempt on debian [37652/tcp] Source port: 51066 TTL: 235 Packet length: 40 TOS: 0x08 ... show more Unauthorized attempt on debian [37652/tcp] Source port: 51066 TTL: 235 Packet length: 40 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-29 14:30:53 (2 days ago)	Blocked by UFW (TCP on 32793) Source port: 52237 TTL: 248 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 32793) Source port: 52237 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 120.55.92.128) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 neron	2026-09-28 11:51:38 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-09-28 07:38:25 (3 days ago)	Port Scan detected from 120.55.92.128 (CN/China/-). N in the last X seconds	Port Scan
🇩🇪 xavier-momain.eu	2026-09-28 01:48:35 (3 days ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #3	Brute-Force SSH
🇺🇸 mutebot.net	2026-09-27 06:09:55 (4 days ago)	SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=51465 SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=2810 ... show more SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=51465 SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=28102 SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=28102 SRC=120.55.92.128, PROTO=TCP, SPT=49390, DPT=53541 show less	Port Scan
🇹🇷 neron	2026-09-26 06:12:43 (5 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-09-25 23:57:52 (5 days ago)	Blocked by UFW (TCP on 21) Source port: 40647 TTL: 246 Packet length: 40 TOS: 0x14 This report (for ... show more Blocked by UFW (TCP on 21) Source port: 40647 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 120.55.92.128) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇬🇧 pearbright	2026-09-25 06:42:32 (6 days ago)	2026-09-25T06:42:25.317825+00:00 srv1093252 kernel: [3134204.092559] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-09-25T06:42:25.317825+00:00 srv1093252 kernel: [3134204.092559] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=120.55.92.128 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=26530 PROTO=TCP SPT=58544 DPT=45583 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-25T06:42:26.016031+00:00 srv1093252 kernel: [3134204.791147] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=120.55.92.128 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=866 PROTO=TCP SPT=58544 DPT=21724 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-25T06:42:27.105030+00:00 srv1093252 kernel: [3134205.877385] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=120.55.92.128 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=45121 PROTO=TCP SPT=58544 DPT=18841 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-25T06:42:27.306829+00:00 srv1093252 kernel: [3134206.082197] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=120.55.92.128 D ... show less	Port Scan
🇳🇱 overture.bar	2026-09-25 06:33:24 (6 days ago)	Blocked by UFW on NsmallFE [43447/tcp] \| SPT: 58002 \| TTL: 235 \| LEN: 40 \| TOS: 0x00	Port Scan
Anonymous	2026-09-25 03:19:40 (6 days ago)	2026-09-25T03:18:05.411259+00:00 UnitedStates1 sshd-session[463234]: Connection closed by 120.55.92. ... show more 2026-09-25T03:18:05.411259+00:00 UnitedStates1 sshd-session[463234]: Connection closed by 120.55.92.128 port 32792 [preauth] 2026-09-25T03:19:39.140276+00:00 UnitedStates1 sshd-session[469140]: Connection closed by 120.55.92.128 port 39280 [preauth] ... show less	Brute-Force SSH
🇹🇼 taiwanfrp.me	2026-09-25 01:51:54 (6 days ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=2, targets10m=2, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=2, targets10m=2, target=proxy:kiwicanary.MinecraftJavaiey\|port:- show less	Port Scan Hacking

Showing 1 to 15 of 262 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.143.1.66

🇺🇸 166.145.160.127

🇨🇳 122.5.220.186

🇳🇱 109.160.32.122

🇺🇸 74.82.47.38

🇺🇸 209.50.167.71

🇩🇪 194.187.176.234

🇳🇱 185.213.174.141

🇦🇷 181.117.167.154

🇫🇷 128.79.175.247

🇻🇳 116.110.182.11

🇳🇱 109.160.32.157

🇺🇸 104.22.193.11

🇨🇦 85.217.149.22

🇷🇸 77.105.37.219

🇺🇸 66.132.172.192

🇧🇩 45.117.62.242

🇺🇸 192.210.213.101

🇺🇸 162.216.150.61

🇲🇾 113.211.192.150