JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.199.163.136

121.199.163.136 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 54%: ?

54%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.199.163.136

Whois 121.199.163.136

IP Abuse Reports for 121.199.163.136:

This IP address has been reported a total of 177 times from 53 distinct sources. 121.199.163.136 was first reported on March 12th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-06-14 08:10:21 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 3389 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇭🇰 PingMeMaybe	2026-06-10 21:48:18 (1 week ago)	Blocked by UFW on hk [30740/tcp] Source port: 48098 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [30740/tcp] Source port: 48098 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 uchat-ai.com	2026-06-04 15:58:19 (2 weeks ago)	IP 121.199.163.136 在过去24小时内进行了 2 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, ... show more IP 121.199.163.136 在过去24小时内进行了 2 次攻击。详细信息: 攻击类型: Found User-Agent associated with security scanner, 攻击信息: Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; nmap scripting engine; https://nmap.org/book/nse.html)"] (Severity: 2); 攻击类型: Found User-Agent associated with security scanner, 攻击信息: Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; nmap scripting engine; https://nmap.org/book/nse.html)"] (Severity: 2) show less	Port Scan
🇩🇪 kingjan1999	2026-06-03 01:38:43 (2 weeks ago)	Blocked by UFW [22244/tcp] \| SPT: 50719 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [22244/tcp] \| SPT: 50719 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-02 19:26:22 (2 weeks ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇫🇷 dusfor72	2026-05-27 22:05:49 (3 weeks ago)	aggressive portscan ...	Port Scan
🇺🇸 mutebot.net	2026-05-26 14:10:49 (3 weeks ago)	SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=57296 SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT= ... show more SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=57296 SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=14895 SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=43179 SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=15633 SRC=121.199.163.136, PROTO=TCP, SPT=44643, DPT=39349 show less	Port Scan
🇭🇰 PingMeMaybe	2026-05-26 12:26:58 (3 weeks ago)	Blocked by UFW on hk [51096/tcp] Source port: 58355 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [51096/tcp] Source port: 58355 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 centurion	2026-05-25 06:17:15 (4 weeks ago)	Unauthorized attempt on uptime [17457/tcp] Source port: 49832 TTL: 231 Packet length: 40 TOS: 0x00 h ... show more Unauthorized attempt on uptime [17457/tcp] Source port: 49832 TTL: 231 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ISPLtd	2026-05-25 02:59:39 (4 weeks ago)	May 24 23:59:38 121.199.163.136 TCP SPT=57976 DPT=23920 SYN May 24 23:59:38 121.199.163.136 TCP SPT= ... show more May 24 23:59:38 121.199.163.136 TCP SPT=57976 DPT=23920 SYN May 24 23:59:38 121.199.163.136 TCP SPT=57976 DPT=33104 SYN May 24 23:59:39 121.199.163.136 TCP SPT=57976 DPT=32993 ... show less	Port Scan
🇩🇪 acadeova	2026-05-24 02:15:46 (4 weeks ago)	Blocked by UFW on vps2 [17555/tcp] Source port: 48910 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [17555/tcp] Source port: 48910 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shaunc	2026-05-21 17:35:32 (1 month ago)	May 21 12:33:04 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0: ... show more May 21 12:33:04 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.199.163.136 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=10809 PROTO=TCP SPT=44777 DPT=9100 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 12:34:26 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.199.163.136 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=41458 PROTO=TCP SPT=44777 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 12:35:29 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.199.163.136 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=5810 PROTO=TCP SPT=44777 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 ISPLtd	2026-05-21 01:54:30 (1 month ago)	May 20 22:54:28 121.199.163.136 TCP SPT=48467 DPT=16972 SYN May 20 22:54:30 121.199.163.136 TCP SPT= ... show more May 20 22:54:28 121.199.163.136 TCP SPT=48467 DPT=16972 SYN May 20 22:54:30 121.199.163.136 TCP SPT=48467 DPT=18660 SYN May 20 22:54:30 121.199.163.136 TCP SPT=48467 DPT=41857 ... show less	Port Scan
🇧🇪 Saec	2026-05-21 00:48:29 (1 month ago)	Jarvis auto-ban: blocklist:binarydefense	Port Scan Web App Attack
Anonymous	2026-05-20 04:47:53 (1 month ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force

Showing 1 to 15 of 177 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.204.230.91

🇺🇸 130.185.239.222

🇩🇪 107.150.117.167

🇱🇻 81.30.98.49

🇩🇪 62.133.60.87

🇳🇱 45.148.10.141

🇹🇷 149.86.144.39

🇳🇱 80.82.77.33

🇺🇸 52.180.144.125

🇱🇹 45.227.254.170

🇺🇸 35.196.236.250

🇺🇸 205.210.31.48

🇩🇪 185.209.196.152

🇯🇴 176.28.136.57

🇬🇧 172.70.58.110

🇺🇸 154.83.197.94

🇨🇳 115.56.238.174

🇷🇴 80.94.92.186

🇳🇱 77.164.176.145

🇺🇸 64.62.156.142