JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.44.247

121.40.44.247 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 51%: ?

51%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.44.247

Whois 121.40.44.247

IP Abuse Reports for 121.40.44.247:

This IP address has been reported a total of 161 times from 54 distinct sources. 121.40.44.247 was first reported on March 16th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-07-12 16:11:21 (2 hours ago)	Port Scan on Honeypot \| Ports: 8080/HTTP-proxy \| Proto: TCP(1) \| Flags: all SYN \| TTL: 230 \| Len: 40 ... show more Port Scan on Honeypot \| Ports: 8080/HTTP-proxy \| Proto: TCP(1) \| Flags: all SYN \| TTL: 230 \| Len: 40B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-07-12T16:11:20Z show less	Port Scan Hacking
🇮🇱 spd.co.il	2026-07-10 20:01:37 (1 day ago)	Port scan detected on multiple ports	Port Scan
🇬🇧 openstrike.co.uk	2026-07-10 07:06:58 (2 days ago)	220 packets to ports 133 147 170 220 254 308 325 701 710 811 821 997 1047 1123 1212 1325 1338 1513 1 ... show more 220 packets to ports 133 147 170 220 254 308 325 701 710 811 821 997 1047 1123 1212 1325 1338 1513 1715 1717 1851 1910 2026 2109 2113 2118 2128 2343 2369 2406 3017 3039 3048 3225 3335 3666 4016 4055 4115 4180 4589 4723 4902 5031 5150 5204 5216 5225 5279 5389, etc. show less	Port Scan
🇩🇰 SaltySoftworks	2026-07-08 16:09:37 (4 days ago)	2026-07-08T16:09:24.602642+00:00 kernel: TCP Attack: SRC=121.40.44.247 DST=[Masked] LEN=40 TOS=0x00 ... show more 2026-07-08T16:09:24.602642+00:00 kernel: TCP Attack: SRC=121.40.44.247 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=236 PROTO=TCP SPT=46963 DPT=29092 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-28 01:20:21 (2 weeks ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇦🇺 LiftUp Hosting	2026-06-16 11:46:02 (3 weeks ago)	Honeypot hit: HTTP request on 3053	Hacking Bad Web Bot
🇺🇸 ISPLtd	2026-06-10 23:32:56 (1 month ago)	Jun 10 17:32:51 121.40.44.247 TCP SPT=54370 DPT=25268 SYN Jun 10 17:32:53 121.40.44.247 TCP SPT=5437 ... show more Jun 10 17:32:51 121.40.44.247 TCP SPT=54370 DPT=25268 SYN Jun 10 17:32:53 121.40.44.247 TCP SPT=54370 DPT=46658 SYN Jun 10 17:32:55 121.40.44.247 TCP SPT=54370 DPT=48593 ... show less	Port Scan
🇺🇸 ISPLtd	2026-06-09 06:13:33 (1 month ago)	Jun 9 00:13:29 121.40.44.247 TCP SPT=45609 DPT=4899 SYN Jun 9 00:13:31 121.40.44.247 TCP SPT=45609 ... show more Jun 9 00:13:29 121.40.44.247 TCP SPT=45609 DPT=4899 SYN Jun 9 00:13:31 121.40.44.247 TCP SPT=45609 DPT=20225 SYN Jun 9 00:13:32 121.40.44.247 TCP SPT=45609 DPT=4244 ... show less	Port Scan
🇺🇸 masterguru	2026-06-07 04:57:45 (1 month ago)	Port Scan detected from 121.40.44.247 (CN/China/-). 11 hits in the last 141 seconds (0-165)	Port Scan
🇬🇧 PeravixGroup	2026-06-06 15:44:38 (1 month ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 acadeova	2026-06-05 15:22:26 (1 month ago)	Blocked by UFW on vps2 [25863/tcp] Source port: 52945 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [25863/tcp] Source port: 52945 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 baltic-lab.com	2026-05-31 08:13:24 (1 month ago)	Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇨🇳 pengpeng	2026-05-29 17:04:22 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 13645 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 13645 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 08:59:19 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇭🇰 PingMeMaybe	2026-05-28 01:29:58 (1 month ago)	Blocked by UFW on hk [62823/tcp] Source port: 51746 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [62823/tcp] Source port: 51746 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:579:9098:1650:10f5:5318:e9ae:dcd4

🇧🇷 177.126.132.44

🇺🇸 172.217.36.84

🇦🇹 85.124.207.102

🇩🇪 47.254.179.207

🇧🇷 20.195.178.90

🇹🇼 198.235.24.79

🇹🇭 147.50.227.79

🇸🇬 101.32.145.199

🇺🇸 98.181.137.80

🇹🇷 85.105.255.56

🇺🇸 23.94.61.208

🇩🇪 216.26.247.226

🇰🇷 211.186.115.35

🇺🇸 147.185.132.159

🇧🇷 104.28.152.36

🇨🇳 101.126.23.159

🇯🇵 20.189.202.72

🇵🇰 203.101.186.239

🇳🇱 176.65.149.220