JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.237.180.162

121.237.180.162 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	CHINANET jiangsu province network
Usage Type	Fixed Line ISP
ASN	AS146966
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.237.180.162

Whois 121.237.180.162

IP Abuse Reports for 121.237.180.162:

This IP address has been reported a total of 43 times from 37 distinct sources. 121.237.180.162 was first reported on March 16th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-18 00:33:56 (3 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇷🇴 abuse_IP_reporter	2026-03-17 09:45:03 (3 months ago)	Mar 17 11:04:52 server UFW BLOCK SRC=121.237.180.162 DF PROTO=TCP SPT=46646	Port Scan
🇨🇭 TOCE	2026-03-17 09:14:52 (3 months ago)	1 hits seen on 2026-03-17, ports 6379 (REDIS) on a honeypot from www.toce.ch	Port Scan
🇺🇸 drewf.ink	2026-03-17 06:48:34 (3 months ago)	[06:48] Port scanning. Port(s) scanned: TCP/6379	Port Scan
🇸🇬 celestialcity	2026-03-17 06:47:19 (3 months ago)	Blocked by UFW on celestialcityas [6379/tcp] \| SPT: 52626 \| TTL: 36 \| LEN: 60 \| TOS: 0x00 • Reported ... show more Blocked by UFW on celestialcityas [6379/tcp] \| SPT: 52626 \| TTL: 36 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 mikethemagic	2026-03-17 06:01:31 (3 months ago)	2026-03-17 03:02:12,106 fail2ban.actions [2075804]: NOTICE [threat-detection] Ban 121.237.18 ... show more 2026-03-17 03:02:12,106 fail2ban.actions [2075804]: NOTICE [threat-detection] Ban 121.237.180.162 2026-03-17 06:00:49,443 fail2ban.actions [2075804]: NOTICE [threat-detection] Ban 121.237.180.162 ... show less	Brute-Force
🇺🇸 drewf.ink	2026-03-17 05:59:21 (3 months ago)	[05:59] Port scanning. Port(s) scanned: TCP/6379	Port Scan
🇯🇵 mkaraki	2026-03-17 05:11:12 (3 months ago)	1773724260 # Service_probe # SIGNATURE_SEND # source_ip:121.237.180.162 # dst_port:6379 ...	Port Scan
🇦🇹 Pingger Shikkoken	2026-03-17 05:10:22 (3 months ago)	2026-03-17T05:10:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-17T05:10:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=121.237.180.162 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=38806 DF PROTO=TCP SPT=58322 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 2026-03-17T06:00:11+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=121.237.180.162 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=65430 DF PROTO=TCP SPT=41956 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Hacking
🇹🇭 Sawasdee	2026-03-17 04:48:14 (3 months ago)	Port Scan ...	Port Scan
🇺🇸 drewf.ink	2026-03-17 04:20:39 (3 months ago)	[04:20] Port scanning. Port(s) scanned: TCP/6379	Port Scan
🇹🇷 0xi	2026-03-17 03:30:40 (3 months ago)	Malicious scanning and attack activity detected (58 attempts). Targeted ports: 6379. Triggered senso ... show more Malicious scanning and attack activity detected (58 attempts). Targeted ports: 6379. Triggered sensors: P0f, Redishoneypot, Suricata. Observed via distributed honeypot network. show less	Port Scan
🇳🇱 VMHeaven.io	2026-03-17 02:54:49 (3 months ago)	Blocked by UFW [6379/tcp] Source port: 53834 TTL: 46 Packet length: 60	Port Scan
🇩🇪 andrepcg	2026-03-17 02:39:04 (3 months ago)	Port scanning (121.237.180.162 -> :6379)	Port Scan Brute-Force
Anonymous	2026-03-17 02:31:47 (3 months ago)	Mar 16 17:49:06 localhost kernel: [102043216.170295] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Mar 16 17:49:06 localhost kernel: [102043216.170295] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.237.180.162 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=42 ID=40383 DF PROTO=TCP SPT=45518 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 Mar 16 17:49:06 localhost kernel: [102043216.170304] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.237.180.162 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=42 ID=40383 DF PROTO=TCP SPT=45518 DPT=6379 SEQ=899991253 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 OPT (020405B40402080A773B5B6A0000000001030307) Mar 16 22:31:47 localhost kernel: [102060176.185200] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.237.180.162 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=42 ID=51219 DF PROTO=TCP SPT=57700 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 Mar 16 22:31:47 localhost kernel: [102060176.185208] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c: show less	Port Scan

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.6.127.70

🇺🇸 150.107.38.251

🇫🇮 94.183.234.128

🇮🇹 88.147.30.59

🇳🇱 45.148.10.147

🇬🇧 35.203.210.117

🇺🇸 35.172.217.240

🇺🇸 137.131.9.65

🇨🇳 124.167.20.113

🇧🇷 205.210.31.207

🇨🇳 183.250.153.105

🇵🇭 165.154.100.42

🇭🇳 181.115.7.203

🇨🇳 120.55.180.250

🇨🇳 59.55.37.165

🇪🇬 45.240.133.177

🇸🇬 8.222.181.172

🇨🇭 209.99.190.113

🇺🇸 208.167.249.178

🇩🇪 207.241.172.187