This IP address has been reported a total of
197
times from
58 distinct
sources.
121.40.196.207 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: Metasploit / penetration testing C2 callback attempt on port 4444. Severity: MED ...
show moreHoneypot detection: Metasploit / penetration testing C2 callback attempt on port 4444. Severity: MEDIUM. Aaran.cloud
show less
Unauthorized connection attempt detected from IP address 121.40.196.207 to port 11211 (ger-02) [MEMC ...
show moreUnauthorized connection attempt detected from IP address 121.40.196.207 to port 11211 (ger-02) [MEMCACHED]
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8291 (generic).
Commands captur ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8291 (generic).
Commands captured:
$
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8291 (generic).
Commands captur ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8291 (generic).
Commands captured:
$ HEAD / HTTP/1.1
show less
4 incidents: malicious activity. First: 2026-06-05 00:06, Last: 2026-06-12 00:30 UTC. Triggers: ufw- ...
show more4 incidents: malicious activity. First: 2026-06-05 00:06, Last: 2026-06-12 00:30 UTC. Triggers: ufw-repeater.
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 37153)
Source port: 46034
TTL: 248
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 37153)
Source port: 46034
TTL: 248
Packet length: 40
TOS: 0x14
This report (for 121.40.196.207) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
*Port Scan* detected from 121.40.196.207 (CN/China/-). 16 hits in the last 40 seconds
Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ...
show moreHoneypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud
show less
Jun 5 09:04:17 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs ...
show moreJun 5 09:04:17 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=121.40.196.207, lip=X.X.X.X session=
show less
Port Scan
Hacking
Showing 1 to
15
of 197 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩