JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.199.173.216

121.199.173.216 was found in our database!

This IP was reported 194 times. Confidence of Abuse is 61%: ?

61%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.199.173.216

Whois 121.199.173.216

IP Abuse Reports for 121.199.173.216:

This IP address has been reported a total of 194 times from 61 distinct sources. 121.199.173.216 was first reported on March 15th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Selckie	2026-06-26 05:46:30 (12 hours ago)	fail2ban: NGINX unusual impact	Web App Attack
🇫🇷 Fasetech	2026-06-18 19:00:34 (1 week ago)	SecLedge detected suspicious activity. Score: 140.16. Sensor: T-Pot.	Brute-Force
🇬🇧 PeravixGroup	2026-06-13 02:30:50 (1 week ago)	Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: ME ... show more Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇨🇳 Peter Yu	2026-06-11 23:27:42 (2 weeks ago)		Bad Web Bot Web App Attack
🇫🇷 Little Iguana	2026-06-09 14:54:37 (2 weeks ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-06-09 01:02:47 (2 weeks ago)	Jun 8 21:02:44 localhost kernel: [109312268.607078] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 8 21:02:44 localhost kernel: [109312268.607078] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.199.173.216 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=50461 PROTO=TCP SPT=46964 DPT=50546 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 8 21:02:44 localhost kernel: [109312268.607097] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.199.173.216 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=50461 PROTO=TCP SPT=46964 DPT=50546 SEQ=1752391697 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 8 21:02:46 localhost kernel: [109312270.376481] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.199.173.216 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=30493 PROTO=TCP SPT=46964 DPT=34210 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 8 21:02:46 localhost kernel: [109312270.376502] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.199.173.216 DST=[mungedIP2] L show less	Port Scan
🇩🇪 mattk	2026-06-07 21:19:14 (2 weeks ago)	port scan	Port Scan
🇯🇵 jay hung	2026-06-07 03:18:38 (2 weeks ago)	2026-06-07T03:18:37.538742+00:00 quarktech kernel: [637158.891140] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-07T03:18:37.538742+00:00 quarktech kernel: [637158.891140] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=121.199.173.216 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=16907 PROTO=TCP SPT=42316 DPT=16101 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 LockBlock	2026-06-06 09:36:32 (2 weeks ago)	2026-06-06 09:36:31: Port scan detected from 121.199.173.216 on port 2000 of racknerd-e7e1a9	Port Scan
🇬🇧 PeravixGroup	2026-06-05 10:08:26 (3 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-04 23:13:52 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 baltic-lab.com	2026-06-02 23:30:10 (3 weeks ago)	2026-06-03T01:29:47.724796+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-03T01:29:47.724796+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.199.173.216 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=15618 PROTO=TCP SPT=42986 DPT=25130 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T01:29:49.482445+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.199.173.216 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=27475 PROTO=TCP SPT=42986 DPT=31719 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T01:29:49.940264+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.199.173.216 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=29151 PROTO=TCP SPT=42986 DPT=62681 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-03T01:29:57.013882+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.199.173.216 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26601 PROTO=TCP SPT=42986 DPT=171 ... show less	Brute-Force Hacking
🇫🇷 dusfor72	2026-06-02 16:34:41 (3 weeks ago)	aggressive portscan ...	Port Scan
🇫🇷 masterguru	2026-06-01 09:10:58 (3 weeks ago)	Port Scan detected from 121.199.173.216 (CN/China/-). 11 hits in the last 115 seconds (0-131)	Port Scan
🇺🇸 ISPLtd	2026-06-01 01:39:51 (3 weeks ago)	May 31 19:39:48 121.199.173.216 TCP SPT=57984 DPT=44839 SYN May 31 19:39:48 121.199.173.216 TCP SPT= ... show more May 31 19:39:48 121.199.173.216 TCP SPT=57984 DPT=44839 SYN May 31 19:39:48 121.199.173.216 TCP SPT=57984 DPT=3845 SYN May 31 19:39:50 121.199.173.216 TCP SPT=57984 DPT=29595 ... show less	Port Scan

Showing 1 to 15 of 194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.103.13.219

🇺🇸 162.216.149.198

🇮🇩 103.210.250.198

🇳🇱 91.92.40.19

🇧🇷 2804:7c40:336:9d00:457e:58da:413:7174

🇳🇱 204.76.203.15

🇧🇦 195.222.57.183

🇺🇸 174.137.20.239

🇮🇶 151.244.151.181

🇺🇿 94.141.84.230

🇫🇷 91.196.152.223

🇱🇻 83.178.222.238

🇬🇧 82.12.134.8

🇺🇸 66.132.172.33

🇺🇸 45.79.8.221

🇰🇷 43.155.134.4

🇨🇳 36.7.99.146

🇮🇳 223.185.59.46

🇺🇸 192.169.201.223

🇹🇷 176.42.16.119