JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.47.210

121.40.47.210 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 66%: ?

66%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.47.210

Whois 121.40.47.210

IP Abuse Reports for 121.40.47.210:

This IP address has been reported a total of 172 times from 55 distinct sources. 121.40.47.210 was first reported on March 11th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-06 12:18:13 (1 day ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇭🇰 PingMeMaybe	2026-06-05 16:50:41 (2 days ago)	Blocked by UFW on hk [8168/tcp] Source port: 58201 TTL: 236 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on hk [8168/tcp] Source port: 58201 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-06-03 02:07:48 (4 days ago)	Connection to port 3007 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 Little Iguana	2026-06-01 11:12:45 (6 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 Honeypot-EU-Fru	2026-05-29 02:36:18 (1 week ago)	1780022177 - 05/29/2026 04:36:17 Host: 121.40.47.210/121.40.47.210 Port: 635 TCP Blocked ...	Port Scan
🇬🇧 PeravixGroup	2026-05-29 00:29:12 (1 week ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇬🇧 pearbright	2026-05-26 03:44:53 (1 week ago)	2026-05-26T03:44:41.951526+00:00 srv1093252 kernel: [513080.516285] [UFW BLOCK] IN=eth0 OUT= MAC=28: ... show more 2026-05-26T03:44:41.951526+00:00 srv1093252 kernel: [513080.516285] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.210 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=24138 PROTO=TCP SPT=47077 DPT=46080 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T03:44:43.007763+00:00 srv1093252 kernel: [513081.572295] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.210 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=58972 PROTO=TCP SPT=47077 DPT=61156 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T03:44:44.277660+00:00 srv1093252 kernel: [513082.841865] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.210 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=50760 PROTO=TCP SPT=47077 DPT=21470 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-26T03:44:45.946968+00:00 srv1093252 kernel: [513084.509312] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.40.47.210 DST ... show less	Port Scan
🇺🇸 mutebot.net	2026-05-24 23:09:27 (1 week ago)	SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=53588 SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=2479 ... show more SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=53588 SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=24793 SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=34750 SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=6841 SRC=121.40.47.210, PROTO=TCP, SPT=44160, DPT=56559 show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 04:13:48 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 acadeova	2026-05-21 15:37:46 (2 weeks ago)	🚨 Recon detected (nft drop) SRC=121.40.47.210 Observed=TCP dpt=63049 in=enp0s6 ttl=241 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=121.40.47.210 Observed=TCP dpt=63049 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 masterguru	2026-05-21 06:47:08 (2 weeks ago)	Port Scan detected from 121.40.47.210 (CN/China/-). 11 hits in the last 51 seconds (0-165)	Port Scan
🇫🇮 notelseit	2026-05-15 08:08:41 (3 weeks ago)	2026-05-15T10:08:34.105654+02:00 mail postfix/submission/smtpd[865276]: lost connection after CONNEC ... show more 2026-05-15T10:08:34.105654+02:00 mail postfix/submission/smtpd[865276]: lost connection after CONNECT from unknown[121.40.47.210] 2026-05-15T10:08:39.275695+02:00 mail postfix/smtps/smtpd[865467]: lost connection after CONNECT from unknown[121.40.47.210] 2026-05-15T10:08:40.565428+02:00 mail postfix/smtps/smtpd[865467]: lost connection after CONNECT from unknown[121.40.47.210] ... show less	Brute-Force Email Spam
🇨🇳 ThreatBook.io	2026-05-14 23:25:43 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.210 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.210 2026-05-14 05:24:05 / 2026-05-14 06:05:00 / 2026-05-14 04:09:57 /favicon.ico 2026-05-14 04:09:57 / show less	Web App Attack
🇩🇪 acadeova	2026-05-11 03:44:06 (3 weeks ago)	Blocked by UFW on vps2 [52497/tcp] Source port: 51011 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [52497/tcp] Source port: 51011 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-04 23:44:38 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.210 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.40.47.210 2026-05-04 11:27:01 / show less	Web App Attack

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.103.62.205

🇷🇴 80.94.95.211

🇸🇬 209.97.169.32

🇻🇳 171.244.143.209

🇨🇳 119.123.133.126

🇷🇺 87.251.79.125

🇺🇸 50.6.228.32

🇨🇳 218.24.63.49

🇳🇱 176.65.139.232

🇺🇸 172.191.132.202

🇺🇸 52.5.232.250

🇸🇦 37.56.107.252

🇰🇷 218.150.184.241

🇷🇺 217.25.231.150

🇺🇸 209.126.107.84

🇧🇴 181.115.147.5

🇨🇳 106.13.174.45

🇺🇸 45.79.207.110

🇫🇮 37.27.34.32

🇨🇭 178.82.187.196