JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.64.121

121.40.64.121 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 79%: ?

79%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.64.121

Whois 121.40.64.121

IP Abuse Reports for 121.40.64.121:

This IP address has been reported a total of 59 times from 27 distinct sources. 121.40.64.121 was first reported on March 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-08-24 06:52:38 (1 day ago)	[AUTORAVALT][[24/08/2026 - 03:52:37 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0 ... show more [AUTORAVALT][[24/08/2026 - 03:52:37 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-08-24 06:19:35 (1 day ago)	[AUTORAVALT][[24/08/2026 - 03:19:34 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0 ... show more [AUTORAVALT][[24/08/2026 - 03:19:34 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇹🇷 neron	2026-08-23 17:21:50 (2 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇨🇳 WMK965	2026-08-22 05:06:30 (3 days ago)	121.40.64.121 - - [22/Aug/2026:13:06:22 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.40.64.121 ... show more 121.40.64.121 - - [22/Aug/2026:13:06:22 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.40.64.121 - - [22/Aug/2026:13:06:23 +0800] "OPTIONS / RTSP/1.0" 400 154 "-" "-" "-" 121.40.64.121 - - [22/Aug/2026:13:06:29 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" show less	Port Scan Web App Attack
🇩🇪 DerLukas	2026-08-21 20:01:22 (4 days ago)		Port Scan
🇺🇸 sandra361	2026-08-21 19:33:49 (4 days ago)	Port scan detected: 20 attempts across 20 ports (82,83,1701,1936,2021, ..., 49668,49670,49698). \| Ev ... show more Port scan detected: 20 attempts across 20 ports (82,83,1701,1936,2021, ..., 49668,49670,49698). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=121.40.64.121 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=46828 PROTO=TCP SPT=40790 DPT=7010 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 chronos	2026-08-21 14:45:47 (4 days ago)	[AUTORAVALT][[21/08/2026 - 11:45:47 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0 ... show more [AUTORAVALT][[21/08/2026 - 11:45:47 -03:00 UTC] Attack from [Li Jia] [121.40.64.121]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇦🇺 LiftUp Hosting	2026-08-17 12:10:08 (1 week ago)	Honeypot hit: HTTP request on 1094	Hacking Bad Web Bot
🇹🇷 neron	2026-08-17 09:23:12 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 _ArminS_	2026-08-16 03:15:16 (1 week ago)	SP-Scan 50113:6667 detected 2026.08.16 05:15:16 blocked until 2026.10.04 22:18:03	Port Scan
🇺🇸 drewf.ink	2026-08-15 13:12:54 (1 week ago)	[13:12] Port scanning. Port(s) scanned: TCP/1812	Port Scan
🇩🇪 chris_yooo	2026-08-14 07:40:45 (1 week ago)	Aug 14 09:40:38 isp postfix/submission/smtpd[1574526]: lost connection after CONNECT from unknown[12 ... show more Aug 14 09:40:38 isp postfix/submission/smtpd[1574526]: lost connection after CONNECT from unknown[121.40.64.121] Aug 14 09:40:44 isp postfix/smtps/smtpd[1574522]: lost connection after CONNECT from unknown[121.40.64.121] Aug 14 09:40:45 isp postfix/smtps/smtpd[1574522]: lost connection after CONNECT from unknown[121.40.64.121] ... show less	Spoofing Brute-Force
Anonymous	2026-08-14 04:41:29 (1 week ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2026-08-08 19:02:12 (2 weeks ago)	121.40.64.121 detected on srv01	Port Scan
Anonymous	2026-08-07 08:01:27 (2 weeks ago)	Blocked by firewall on hugin [3123/tcp] \| Rule: UFW \| SPT: 49687 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [3123/tcp] \| Rule: UFW \| SPT: 49687 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 157.245.71.165

🇹🇼 128.14.226.191

🇧🇬 91.191.209.46

🇬🇧 51.195.183.29

🇷🇺 46.242.15.145

🇧🇪 34.38.188.26

🇺🇸 216.180.246.74

🇻🇪 206.1.182.13

🇷🇴 193.46.255.86

🇦🇷 190.231.40.57

🇩🇪 178.250.12.17

🇭🇰 156.245.246.50

🇳🇱 95.173.207.168

🇳🇴 81.166.116.181

🇵🇱 80.49.174.22

🇧🇬 79.124.62.126

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇮🇹 2a00:1450:4025:1807::124

🇩🇪 212.227.150.238