JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.42.155

121.40.42.155 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 85%: ?

85%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.42.155

Whois 121.40.42.155

IP Abuse Reports for 121.40.42.155:

This IP address has been reported a total of 171 times from 56 distinct sources. 121.40.42.155 was first reported on March 2nd 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 derLoosi	2026-06-05 23:01:04 (8 hours ago)	HV1.2 Blocked by UFW	Port Scan
🇬🇧 PeravixGroup	2026-06-05 17:40:06 (14 hours ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 Honeypot-EU-Fru	2026-06-05 13:23:15 (18 hours ago)	1780665793 - 06/05/2026 15:23:13 Host: 121.40.42.155/121.40.42.155 Port: 2000 TCP Blocked ...	Port Scan
🇺🇸 chronos	2026-06-05 02:29:06 (1 day ago)	[AUTORAVALT][[04/06/2026 - 23:29:06 -03:00 UTC] Attack from [Li Jia] [121.40.42.155]-[RANGE:121.40.0 ... show more [AUTORAVALT][[04/06/2026 - 23:29:06 -03:00 UTC] Attack from [Li Jia] [121.40.42.155]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇫🇷 ISPLtd	2026-05-29 14:22:23 (1 week ago)	May 29 11:22:03 121.40.42.155 TCP SPT=44514 DPT=17001 SYN May 29 11:22:14 121.40.42.155 TCP SPT=4451 ... show more May 29 11:22:03 121.40.42.155 TCP SPT=44514 DPT=17001 SYN May 29 11:22:14 121.40.42.155 TCP SPT=44514 DPT=8443 SYN May 29 11:22:23 121.40.42.155 TCP SPT=44514 DPT=8045 ... show less	Port Scan
🇺🇸 shaunc	2026-05-29 06:21:41 (1 week ago)	May 29 01:18:42 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0: ... show more May 29 01:18:42 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.40.42.155 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=129 PROTO=TCP SPT=55429 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 May 29 01:20:09 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.40.42.155 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=27466 PROTO=TCP SPT=55429 DPT=5060 WINDOW=1024 RES=0x00 SYN URGP=0 May 29 01:21:38 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:6c:78:c1:10:f6:b0:08:00 SRC=121.40.42.155 DST=[redacted] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=16754 PROTO=TCP SPT=55429 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 LockBlock	2026-05-29 06:15:39 (1 week ago)	2026-05-29 06:15:39: Port scan detected from 121.40.42.155 on port 110 of racknerd-e7e1a9	Port Scan
🇨🇦 Blinker73	2026-05-27 23:19:15 (1 week ago)	2026-05-27T19:19 kernel: OUT= SRC=121.40.42.155 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=46201 PRO ... show more 2026-05-27T19:19 kernel: OUT= SRC=121.40.42.155 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=46201 PROTO=TCP SPT=43946 DPT=39305 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T19:19 kernel: OUT= SRC=121.40.42.155 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=38476 PROTO=TCP SPT=43946 DPT=19831 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T19:19 kernel: OUT= SRC=121.40.42.155 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=31225 PROTO=TCP SPT=43946 DPT=3445 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇫🇷 Petre 21_ip	2026-05-27 19:13:43 (1 week ago)	2026-05-27T21:13:42.826256+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-27T21:13:42.826256+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=121.40.42.155 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=21924 PROTO=TCP SPT=49222 DPT=55536 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 mutebot.net	2026-05-26 14:36:14 (1 week ago)	SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=29789 SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=5071 ... show more SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=29789 SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=50710 SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=32270 SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=17609 SRC=121.40.42.155, PROTO=TCP, SPT=46165, DPT=3770 show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 13:59:30 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 masterguru	2026-05-21 11:26:54 (2 weeks ago)	Port Scan detected from 121.40.42.155 (CN/China/-). 11 hits in the last 181 seconds (0-165)	Port Scan
Anonymous	2026-05-20 20:06:59 (2 weeks ago)	Port Scan detected from 121.40.42.155 (CN/China/-). 16 hits in the last 20 seconds	Web App Attack
🇨🇭 ScanThe.Net	2026-05-18 05:46:24 (2 weeks ago)	ID: 3320286244 \| PORT: 63077 \| https://121-40-42-155.scanthe.net	Port Scan
🇨🇳 ThreatBook.io	2026-05-15 01:13:23 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.42.155	SSH

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.194.140.170

🇺🇸 107.174.125.234

🇫🇷 91.196.152.119

🇺🇸 73.36.177.174

🇳🇱 45.153.34.71

🇻🇳 36.50.177.171

🇳🇱 193.176.31.201

🇿🇦 185.132.186.36

🇺🇸 162.216.150.40

🇺🇸 136.49.53.226

🇿🇦 105.224.38.156

🇺🇸 72.253.251.3

🇰🇷 1.245.74.10

🇺🇸 195.184.76.143

🇩🇪 193.124.20.246

🇧🇷 191.241.243.202

🇨🇴 181.51.189.171

🇺🇸 173.252.70.130

🇺🇸 150.107.38.111

🇩🇪 148.251.222.210