JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.199.163.167

Recent Activity

Abuse confidence score ?

87% Critical

299 reports

94 reporters · latest 1 day ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 121.199.163.167

Export CSV

This IP address has been reported a total of 299 times from 94 distinct sources. 121.199.163.167 was first reported on March 17th 2025, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Turkey with 24 reports; France with 9 reports; Germany with 5 reports. The most common categories in these recent reports were: Hacking 27 times; Web App Attack 24 times; Port Scan 23 times; Brute-Force 9 times; SSH 6 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sonot	2026-10-05 16:04:10 (1 day ago)	Blocked by UFW on tunneluk01 [9122/tcp] \| SPT: 56243 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [9122/tcp] \| SPT: 56243 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Arpan Sen	2026-10-05 06:29:34 (2 days ago)	Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections receive ... show more Network port/address scan: probed 220 distinct port(s) across 1 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇨🇳 Dominicwu	2026-10-04 12:12:43 (2 days ago)	SSH brute-force against a home router (dropbear): 2 auth-failure log entries within a 600s window st ... show more SSH brute-force against a home router (dropbear): 2 auth-failure log entries within a 600s window starting 2026-09-04 03:45. Evidence: user=unknown src_port=33114; user=unknown src_port=33244. TCP port scan against non-whitelisted ports on the same router: 35 SYN packet(s) logged by nftables within a 300s window starting 2026-09-04 03:44 (dst ports: 22,42215; nftables rate-limits logging, actual scan may be larger). Evidence: dst_port=22 src_port=35931; dst_port=22 src_port=35932; dst_port=22 src_port=35939; dst_port=42215 src_port=35944. Reported automatically from firewall/SSH logs collected by abuseipdb-reporter. show less	Port Scan Brute-Force SSH
🇬🇧 swalluw	2026-10-04 04:45:55 (3 days ago)	Port scan: 5 distinct ports probed in 2m00s (dropped by firewall, last 2026-10-04T04:45:55+00:00): 2 ... show more Port scan: 5 distinct ports probed in 2m00s (dropped by firewall, last 2026-10-04T04:45:55+00:00): 26892/tcp, 36620/tcp, 41079/tcp, 54340/tcp, 60131/tcp show less	Port Scan
🇫🇷 Entalpi.net	2026-10-03 11:19:14 (3 days ago)	Repeatedly filtered for trying to reach closed ports	Port Scan
🇫🇷 masterguru	2026-10-03 10:49:57 (3 days ago)	Port Scan detected from 121.199.163.167 (CN/China/-). 11 hits in the last 30 seconds (0-131)	Port Scan
🇹🇷 neron	2026-10-02 22:04:28 (4 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 peter.pann	2026-10-01 22:21:36 (5 days ago)	Port scan: 220 blocked connection attempts to ports 268,375,713,829,950,1143,1509,1534,2821,2997 (dr ... show more Port scan: 220 blocked connection attempts to ports 268,375,713,829,950,1143,1509,1534,2821,2997 (dropped by our geo-firewall). show less	Port Scan
🇩🇪 xavier-momain.eu	2026-10-01 18:48:29 (5 days ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #3	Brute-Force SSH
🇭🇰 CyberFox	2026-10-01 04:01:25 (6 days ago)	49742/tcp,57626/tcp,25355/tcp,44094/tcp,44420/tcp,27429/tcp,63311/tcp,63588/tcp,44881/tcp,965/tcp,13 ... show more 49742/tcp,57626/tcp,25355/tcp,44094/tcp,44420/tcp,27429/tcp,63311/tcp,63588/tcp,44881/tcp,965/tcp,13095/tcp,21225/tcp,30690/tcp,25306/tcp,38009/tcp,50994/tcp,25388/tcp,52736/tcp,40326/tcp,57734/tcp,55302/tcp,30863/tcp,2671/tcp,48972/tcp,21445/tcp,33584/tcp,6157/tcp,65350/tcp (201 or more attempts) show less	Port Scan
🇹🇷 neron	2026-09-30 22:06:38 (6 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 masterguru	2026-09-30 11:13:12 (6 days ago)	Port Scan detected from 121.199.163.167 (CN/China/-). 11 hits in the last 110 seconds (0-131)	Port Scan
Anonymous	2026-09-29 20:57:55 (1 week ago)	1790715475 - 09/29/2026 22:57:55 Host: 121.199.163.167/121.199.163.167 Port: 660 TCP Blocked ...	Port Scan
🇹🇷 neron	2026-09-29 11:51:38 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 xavier-momain.eu	2026-09-28 14:21:54 (1 week ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH

Showing 1 to 15 of 299 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 34.38.185.61

🇰🇷 221.163.5.228

🇹🇭 203.156.108.110

🇷🇺 178.251.142.166

🇺🇸 173.239.224.76

🇺🇸 172.98.33.204

🇫🇮 147.185.133.12

🇮🇳 136.185.225.117

🇨🇳 106.54.40.96

🇺🇸 92.71.23.43

🇱🇹 62.60.130.173

🇧🇷 45.182.234.225

🇲🇦 41.249.116.245

🇬🇧 35.203.210.110

🇺🇸 198.13.219.182

🇳🇱 193.47.62.69

🇺🇸 173.239.224.81

🇺🇸 173.239.224.74

🇺🇸 172.98.33.212

🇺🇸 172.98.33.208