JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.47.123

121.40.47.123 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 67%: ?

67%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.47.123

Whois 121.40.47.123

IP Abuse Reports for 121.40.47.123:

This IP address has been reported a total of 177 times from 53 distinct sources. 121.40.47.123 was first reported on March 24th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 taiwanfrp.me	2026-06-07 04:25:57 (9 hours ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJawefewfewfewfvamzb\|port:- show less	Port Scan Hacking
🇫🇷 ISPLtd	2026-06-04 12:55:06 (3 days ago)	Jun 4 09:55:01 121.40.47.123 TCP SPT=57699 DPT=48357 SYN Jun 4 09:55:03 121.40.47.123 TCP SPT=5769 ... show more Jun 4 09:55:01 121.40.47.123 TCP SPT=57699 DPT=48357 SYN Jun 4 09:55:03 121.40.47.123 TCP SPT=57699 DPT=14618 SYN Jun 4 09:55:05 121.40.47.123 TCP SPT=57699 DPT=13648 ... show less	Port Scan
Anonymous	2026-06-03 16:31:19 (3 days ago)	Port Scan detected from 121.40.47.123 (CN/China/-). 16 hits in the last 80 seconds	Web App Attack
🇬🇧 PeravixGroup	2026-06-01 05:53:50 (6 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 kingjan1999	2026-05-31 07:56:21 (1 week ago)	Blocked by UFW [54776/tcp] \| SPT: 54166 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [54776/tcp] \| SPT: 54166 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 masterguru	2026-05-27 03:16:16 (1 week ago)	Port Scan detected from 121.40.47.123 (CN/China/-). 11 hits in the last 277 seconds (0-165)	Port Scan
Anonymous	2026-05-23 20:39:11 (2 weeks ago)	Blocked by UFW (TCP on 7696) Source port: 48745 TTL: 248 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 7696) Source port: 48745 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 121.40.47.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 11:05:07 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-22 19:03:59 (2 weeks ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 pearbright	2026-05-18 16:51:44 (2 weeks ago)	2026-05-18T16:49:36.474357+00:00 srv1093252 kernel: [1538480.690695] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-05-18T16:49:36.474357+00:00 srv1093252 kernel: [1538480.690695] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.123 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=2233 PROTO=TCP SPT=42975 DPT=32920 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T16:49:37.281759+00:00 srv1093252 kernel: [1538481.497674] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.123 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=31808 PROTO=TCP SPT=42975 DPT=57659 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T16:49:37.699044+00:00 srv1093252 kernel: [1538481.915239] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.123 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=6486 PROTO=TCP SPT=42975 DPT=36094 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T16:49:45.623185+00:00 srv1093252 kernel: [1538489.838941] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.123 D ... show less	Port Scan
🇨🇳 pengpeng	2026-05-18 10:01:53 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 12645 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 12645 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-15 23:17:11 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.123 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.123 2026-05-15 05:05:57 / show less	Web App Attack
🇩🇪 acadeova	2026-05-15 13:37:29 (3 weeks ago)	🚨 Recon detected (nft drop) SRC=121.40.47.123 Observed=TCP dpt=9099 in=enp0s6 ttl=241 Time=recent(jo ... show more 🚨 Recon detected (nft drop) SRC=121.40.47.123 Observed=TCP dpt=9099 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 LockBlock	2026-05-09 21:51:51 (4 weeks ago)	2026-05-09 21:51:51: Port scan detected from 121.40.47.123 on port 32771 of racknerd-e7e1a9	Port Scan
🇺🇸 centurion	2026-05-08 01:31:33 (4 weeks ago)	Blocked by UFW on talk [11914/tcp] Source port: 43888 TTL: 240 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on talk [11914/tcp] Source port: 43888 TTL: 240 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 177 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.70.226

🇮🇳 182.95.186.66

🇯🇵 172.104.100.117

🇲🇽 148.216.255.251

🇺🇸 138.197.64.69

🇺🇸 104.248.119.2

🇺🇸 100.29.192.37

🇧🇷 89.116.115.61

🇺🇸 66.132.172.37

🇺🇸 64.227.17.76

🇰🇷 211.105.129.57

🇩🇪 193.58.121.21

🇫🇮 193.35.17.17

🇮🇳 139.59.78.146

🇺🇸 135.119.239.52

🇮🇳 122.252.246.48

🇨🇳 114.223.76.35

🇷🇺 95.47.246.223

🇲🇩 91.208.197.227

🇱🇺 83.142.209.244