JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.55.92.153

120.55.92.153 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 67%: ?

67%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.55.92.153

Whois 120.55.92.153

IP Abuse Reports for 120.55.92.153:

This IP address has been reported a total of 181 times from 58 distinct sources. 120.55.92.153 was first reported on November 30th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-06-10 21:17:49 (1 day ago)	Blocked by UFW on vps2 [45105/tcp] Source port: 46240 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [45105/tcp] Source port: 46240 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 gnom4ik	2026-06-07 09:56:22 (4 days ago)	ban-reviewer auto report; ip=120.55.92.153; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0 ... show more ban-reviewer auto report; ip=120.55.92.153; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-06 03:00:48 (5 days ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 micropedro	2026-06-05 12:30:04 (6 days ago)	3 incidents: malicious activity. First: 2026-05-22 06:30, Last: 2026-06-05 08:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-05-22 06:30, Last: 2026-06-05 08:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-04 05:00:08 (1 week ago)	2026-06-04T06:59:43.132965+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-04T06:59:43.132965+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=120.55.92.153 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=19538 PROTO=TCP SPT=49182 DPT=63647 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T06:59:44.381423+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=120.55.92.153 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=35306 PROTO=TCP SPT=49182 DPT=33903 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T07:00:00.304945+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=120.55.92.153 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=7635 PROTO=TCP SPT=49182 DPT=13049 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-04T07:00:02.209089+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=120.55.92.153 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=58757 PROTO=TCP SPT=49182 DPT=24215 WINDOW ... show less	Brute-Force Hacking
🇫🇷 dusfor72	2026-06-02 15:40:18 (1 week ago)	aggressive portscan ...	Port Scan
🇬🇧 PeravixGroup	2026-05-29 22:56:42 (1 week ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 micropedro	2026-05-29 11:30:07 (1 week ago)	4 incidents: malicious activity. First: 2026-05-22 06:30, Last: 2026-05-29 07:30 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-05-22 06:30, Last: 2026-05-29 07:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇭🇰 pengpeng	2026-05-29 09:28:57 (1 week ago)	monitor: on ser162528253480 \| port: 4658 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 4658 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 centurion	2026-05-25 07:51:25 (2 weeks ago)	Unauthorized attempt on uptime [42897/tcp] Source port: 55483 TTL: 232 Packet length: 40 TOS: 0x00 h ... show more Unauthorized attempt on uptime [42897/tcp] Source port: 55483 TTL: 232 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-05-24 02:27:10 (2 weeks ago)	2026-05-24T04:27:09.728239+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-24T04:27:09.728239+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=120.55.92.153 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=509 PROTO=TCP SPT=49621 DPT=7731 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-05-23 14:59:34 (2 weeks ago)	Blocked by UFW (TCP on 41655) Source port: 48368 TTL: 246 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 41655) Source port: 48368 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 120.55.92.153) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 16:24:46 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 sandra361	2026-05-20 18:44:01 (3 weeks ago)	Port scan detected: 49 attempts across 47 ports (10741,11084,11996,13723,16710,17828,19789,19792,230 ... show more Port scan detected: 49 attempts across 47 ports (10741,11084,11996,13723,16710,17828,19789,19792,23084,23406,23464,24708,25159,26792,27977,28852,29658,31466,31594,38283,43117,43736,43846,44607,44926,45958,46826,47682,47886,48255,4949,50681,50821,53167,54657,55042,56260,57753,58507,590,59720,60997,62151,63004,65212,6866,9755). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=120.55.92.153 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=57155 PROTO=TCP SPT=42593 DPT=24708 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-18 00:44:16 (3 weeks ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/120.55.92.153 2026-05- ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/120.55.92.153 2026-05-17 12:34:19 / 2026-05-17 18:53:16 / 2026-05-17 18:53:16 /favicon.ico show less	Web App Attack

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 85.203.36.37

🇹🇼 198.235.24.100

🇰🇷 121.128.173.237

🇰🇷 120.29.140.188

🇺🇸 99.185.231.135

🇸🇬 51.79.143.228

🇺🇸 43.166.244.66

🇵🇪 190.223.36.108

🇨🇳 140.206.235.22

🇨🇳 121.204.162.111

🇷🇺 77.106.78.215

🇺🇸 69.164.217.74

🇱🇹 45.227.254.170

🇨🇳 222.223.62.8

🇺🇸 170.106.148.137

🇦🇪 153.75.91.28

🇮🇳 128.185.187.2

🇺🇸 69.125.145.135

🇮🇪 20.123.45.121

🇳🇱 5.255.111.197