JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.46.70

121.40.46.70 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 38%: ?

38%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.46.70

Whois 121.40.46.70

IP Abuse Reports for 121.40.46.70:

This IP address has been reported a total of 204 times from 61 distinct sources. 121.40.46.70 was first reported on March 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-07-19 06:39:29 (2 days ago)	[06:39] Port scanning. Port(s) scanned: TCP/9092	Port Scan
🇺🇸 chillcog.com	2026-07-09 18:38:40 (1 week ago)	Blocked by on honeypot2 [8704/tcp] \| SPT: 42319 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [8704/tcp] \| SPT: 42319 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 masterguru	2026-07-05 13:00:56 (2 weeks ago)	Port Scan detected from 121.40.46.70 (CN/China/-). 11 hits in the last 66 seconds (0-165)	Port Scan
🇨🇦 Blinker73	2026-07-02 00:54:12 (2 weeks ago)	2026-07-01T20:54 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=24080 PROT ... show more 2026-07-01T20:54 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=24080 PROTO=TCP SPT=53649 DPT=12505 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T20:54 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=12418 PROTO=TCP SPT=53649 DPT=15000 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇳🇱 SysAdmin Dylan	2026-07-01 05:04:20 (2 weeks ago)	Port Scan detected from 121.40.46.70 (CN/China/-). 11 hits in the last 161 seconds	Brute-Force
Anonymous	2026-06-15 16:53:08 (1 month ago)	📡 TCP port scanner, 5 or more hits, last seen on port 8501 10036 1443	Port Scan
🇨🇦 alexbfr	2026-06-12 17:50:29 (1 month ago)	Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.	Port Scan
🇨🇦 Blinker73	2026-06-10 21:45:24 (1 month ago)	2026-06-10T17:45 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=22685 PROT ... show more 2026-06-10T17:45 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=22685 PROTO=TCP SPT=47921 DPT=46114 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-10T17:45 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=57123 PROTO=TCP SPT=47921 DPT=11896 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-10T17:45 kernel: OUT= SRC=121.40.46.70 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=51652 PROTO=TCP SPT=47921 DPT=54329 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇺🇸 ISPLtd	2026-06-03 12:08:27 (1 month ago)	Jun 3 06:08:25 121.40.46.70 TCP SPT=48499 DPT=12950 SYN Jun 3 06:08:25 121.40.46.70 TCP SPT=48499 ... show more Jun 3 06:08:25 121.40.46.70 TCP SPT=48499 DPT=12950 SYN Jun 3 06:08:25 121.40.46.70 TCP SPT=48499 DPT=21685 SYN Jun 3 06:08:26 121.40.46.70 TCP SPT=48499 DPT=21146 ... show less	Port Scan
🇩🇪 tinect	2026-05-29 08:15:49 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 acadeova	2026-05-22 11:54:28 (1 month ago)	🚨 Recon detected (nft drop) SRC=121.40.46.70 Observed=TCP dpt=30687 in=enp0s6 ttl=241 Time=recent(jo ... show more 🚨 Recon detected (nft drop) SRC=121.40.46.70 Observed=TCP dpt=30687 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 11:19:28 (1 month ago)	Honeypot detection: MS-RPC / Windows RPC service exploitation attempt on port 135. Severity: MEDIUM. ... show more Honeypot detection: MS-RPC / Windows RPC service exploitation attempt on port 135. Severity: MEDIUM. Aaran.cloud show less	Hacking
🇺🇸 baltic-lab.com	2026-05-20 16:25:11 (2 months ago)	2026-05-20T18:24:48.371588+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-20T18:24:48.371588+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.40.46.70 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=15969 PROTO=TCP SPT=54285 DPT=1612 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-20T18:24:57.741071+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.40.46.70 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=39858 PROTO=TCP SPT=54285 DPT=4147 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-20T18:25:01.710542+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.40.46.70 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=19034 PROTO=TCP SPT=54285 DPT=10462 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-20T18:25:01.955005+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.40.46.70 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=38950 PROTO=TCP SPT=54285 DPT=21876 WINDOW=1024 ... show less	Brute-Force Hacking
🇨🇳 ThreatBook.io	2026-05-17 22:25:04 (2 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.46.70 2026-0 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.46.70 2026-05-17 01:57:24 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-09 22:29:17 (2 months ago)	ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.40.46.70 202 ... show more ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.40.46.70 2026-05-09 00:12:10 /favicon.ico 2026-05-09 00:12:10 / 2026-05-09 00:48:52 / show less	Web App Attack

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.235.102.147

🇸🇬 152.42.246.10

🇺🇸 146.88.240.128

🇩🇪 141.11.36.48

🇨🇳 117.81.212.152

🇨🇳 115.231.78.10

🇮🇩 103.148.100.146

🇵🇭 27.110.166.67

🇺🇸 205.210.31.81

🇿🇦 197.185.130.161

🇺🇸 143.244.164.53

🇺🇸 104.243.42.167

🇳🇱 46.29.25.46

🇧🇪 35.241.197.114

🇷🇴 2.57.121.112

🇨🇳 1.15.173.241

🇳🇱 213.21.239.70

🇺🇸 205.210.31.80

🇧🇷 201.216.109.244

🇺🇸 173.194.103.173