JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.46.166

121.40.46.166 was found in our database!

This IP was reported 203 times. Confidence of Abuse is 77%: ?

77%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.46.166

Whois 121.40.46.166

IP Abuse Reports for 121.40.46.166:

This IP address has been reported a total of 203 times from 69 distinct sources. 121.40.46.166 was first reported on March 31st 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-05 11:50:49 (2 hours ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-06-04 22:13:18 (15 hours ago)	Jun 5 00:13:16 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 5 00:13:16 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=121.40.46.166 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=22620 PROTO=TCP SPT=51151 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-06-04 22:12:36 (15 hours ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-06-04 18:44:10 (19 hours ago)	Blocked by UFW (TCP on 8021) Source port: 58639 TTL: 246 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 8021) Source port: 58639 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 121.40.46.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-06-04 01:00:04 (1 day ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 excill	2026-06-02 03:04:42 (3 days ago)	Honeypot mesh observed 919 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇨🇳 pengpeng	2026-05-25 19:11:01 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 30952 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 30952 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-25 00:52:59 (1 week ago)	May 24 20:52:56 localhost kernel: [108015709.423379] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 24 20:52:56 localhost kernel: [108015709.423379] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.40.46.166 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=20419 PROTO=TCP SPT=50375 DPT=18525 WINDOW=1024 RES=0x00 SYN URGP=0 May 24 20:52:56 localhost kernel: [108015709.423396] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.40.46.166 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=20419 PROTO=TCP SPT=50375 DPT=18525 SEQ=2108647392 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 24 20:52:58 localhost kernel: [108015711.391632] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.40.46.166 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=35159 PROTO=TCP SPT=50375 DPT=42869 WINDOW=1024 RES=0x00 SYN URGP=0 May 24 20:52:58 localhost kernel: [108015711.391649] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.40.46.166 DST=[mungedIP2] LEN=40 TO show less	Port Scan
🇫🇷 dusfor72	2026-05-24 10:30:13 (1 week ago)	aggressive portscan ...	Port Scan
Anonymous	2026-05-23 20:05:33 (1 week ago)	Blocked by UFW (TCP on 30454) Source port: 46696 TTL: 246 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 30454) Source port: 46696 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 121.40.46.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Fasetech	2026-05-19 14:45:32 (2 weeks ago)	SecLedge detected suspicious activity. Score: 3009.0. Sensor: T-Pot.	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-05-18 22:51:02 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.46.166 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.46.166 2026-05-18 13:51:50 / 2026-05-18 08:32:44 / show less	Web App Attack
🇫🇷 Petre 21_ip	2026-05-18 05:26:28 (2 weeks ago)	2026-05-18T07:26:27.674861+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-18T07:26:27.674861+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=121.40.46.166 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=231 ID=30482 PROTO=TCP SPT=41986 DPT=28126 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cpxducky	2026-05-15 11:45:35 (3 weeks ago)	2026-05-15 11:45:35: Minecraft server scan detected from 121.40.46.166 on port 25565 of mail.cpxduck ... show more 2026-05-15 11:45:35: Minecraft server scan detected from 121.40.46.166 on port 25565 of mail.cpxducky.com show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-14 23:01:35 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.46.166	SSH

Showing 1 to 15 of 203 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 122.247.8.182

🇭🇰 118.193.47.155

🇨🇳 222.139.40.4

🇺🇸 216.180.246.232

🇺🇸 162.216.149.206

🇩🇪 104.23.239.113

🇮🇳 103.158.40.65

🇸🇬 68.183.236.1

🇵🇱 57.128.225.99

🇨🇳 43.248.108.41

🇨🇦 38.49.217.60

🇮🇩 36.93.249.106

🇬🇧 35.203.210.11

🇨🇦 2607:f8b0:4023:1807::12b

🇰🇷 222.110.147.56

🇩🇪 194.164.59.59

🇺🇸 162.216.150.117

🇮🇩 103.191.92.206

🇫🇷 91.196.152.242

🇺🇿 87.237.237.188