JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.1.120.166

128.1.120.166 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 15%: ?

15%

ISP	Zenlayer Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62610
Domain Name	zenlayer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.1.120.166

Whois 128.1.120.166

IP Abuse Reports for 128.1.120.166:

This IP address has been reported a total of 13 times from 2 distinct sources. 128.1.120.166 was first reported on May 29th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-11 09:42:07 (3 days ago)	Connection atttempts against closed TCP ports Jul 11 11:41:56 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 11 11:41:56 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=53770 DPT=443 WINDOW=0 RES=0x00 RST Jul 11 11:42:00 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=53770 DPT=443 WINDOW=0 RES=0x00 RST Jul 11 11:42:06 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=53770 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-07-10 01:34:59 (5 days ago)	Connection atttempts against closed TCP ports Jul 10 03:34:53 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 10 03:34:53 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=36560 DPT=443 WINDOW=0 RES=0x00 RST Jul 10 03:34:55 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=36560 DPT=443 WINDOW=0 RES=0x00 RST Jul 10 03:34:58 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=36560 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-07-09 07:10:36 (5 days ago)	Connection atttempts against closed TCP ports Jul 9 09:10:32 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 9 09:10:32 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=60750 DPT=443 WINDOW=0 RES=0x00 RST Jul 9 09:10:33 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=60750 DPT=443 WINDOW=0 RES=0x00 RST Jul 9 09:10:35 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=60750 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇺🇸 xmission.com	2026-07-08 10:11:38 (6 days ago)	Blocked by UFW (TCP on 443) Source port: 35622 TTL: 43 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 35622 TTL: 43 Packet length: 40 TOS: 0x08 This report (for 128.1.120.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 london2038.com	2026-07-04 02:45:28 (1 week ago)	Connection atttempts against closed TCP ports Jul 4 04:45:24 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 4 04:45:24 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=56028 DPT=443 WINDOW=0 RES=0x00 RST Jul 4 04:45:26 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=56028 DPT=443 WINDOW=0 RES=0x00 RST Jul 4 04:45:27 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=56028 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-07-02 07:06:11 (1 week ago)	Connection atttempts against closed TCP ports Jul 2 09:06:05 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 2 09:06:05 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=57576 DPT=80 WINDOW=0 RES=0x00 RST Jul 2 09:06:07 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=57576 DPT=80 WINDOW=0 RES=0x00 RST Jul 2 09:06:10 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=57576 DPT=80 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-23 06:32:17 (3 weeks ago)	Connection atttempts against closed TCP ports Jun 23 08:32:07 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 23 08:32:07 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST Jun 23 08:32:10 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST Jun 23 08:32:17 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-20 17:37:26 (3 weeks ago)	Connection atttempts against closed TCP ports Jun 20 19:37:17 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 20 19:37:17 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42130 DPT=443 WINDOW=0 RES=0x00 RST Jun 20 19:37:18 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42130 DPT=443 WINDOW=0 RES=0x00 RST Jun 20 19:37:20 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42130 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-20 02:26:30 (3 weeks ago)	Connection atttempts against closed TCP ports Jun 20 04:26:19 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 20 04:26:19 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56326 DPT=443 WINDOW=0 RES=0x00 RST Jun 20 04:26:22 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56326 DPT=443 WINDOW=0 RES=0x00 RST Jun 20 04:26:29 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56326 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇺🇸 xmission.com	2026-06-06 05:10:51 (1 month ago)	Blocked by UFW (TCP on 80) Source port: 32780 TTL: 43 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 32780 TTL: 43 Packet length: 40 TOS: 0x08 This report (for 128.1.120.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 london2038.com	2026-06-02 18:31:02 (1 month ago)	Connection atttempts against closed TCP ports Jun 2 20:30:38 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 2 20:30:38 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=33568 DPT=443 WINDOW=0 RES=0x00 RST Jun 2 20:30:41 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=33568 DPT=443 WINDOW=0 RES=0x00 RST Jun 2 20:31:01 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=33568 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-01 20:31:18 (1 month ago)	Connection atttempts against closed TCP ports Jun 1 22:30:57 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 1 22:30:57 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST Jun 1 22:31:04 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST Jun 1 22:31:17 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=52474 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-05-29 22:42:14 (1 month ago)	Connection atttempts against closed TCP ports May 30 00:42:03 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports May 30 00:42:03 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56484 DPT=443 WINDOW=0 RES=0x00 RST May 30 00:42:06 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56484 DPT=443 WINDOW=0 RES=0x00 RST May 30 00:42:12 BLOCK SRC=128.1.120.166 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=56484 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 222.255.214.223

🇬🇧 217.155.75.149

🇺🇸 147.185.132.75

🇺🇸 147.185.132.73

🇺🇸 147.185.132.72

🇨🇱 34.176.125.167

🇳🇵 27.34.70.16

🇺🇸 20.168.12.169

🇦🇹 2a09:bac5:fa:26e6::3e0:5f

🇩🇪 213.209.159.11

🇲🇽 201.132.91.212

🇧🇷 201.71.36.210

🇭🇰 199.45.154.187

🇺🇸 185.150.190.165

🇱🇹 185.2.228.48

🇧🇩 182.252.81.39

🇺🇸 147.185.132.70

🇺🇸 147.185.132.68

🇺🇸 147.185.132.67

🇺🇸 147.185.132.66