JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.64.229

121.40.64.229 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 46%: ?

46%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.64.229

Whois 121.40.64.229

IP Abuse Reports for 121.40.64.229:

This IP address has been reported a total of 21 times from 11 distinct sources. 121.40.64.229 was first reported on July 10th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-08-30 18:58:40 (1 day ago)	2026-08-31T01:58:37.259315 mail-honeypot postfix/submission/smtpd[21571]: warning: unknown[121.40.64 ... show more 2026-08-31T01:58:37.259315 mail-honeypot postfix/submission/smtpd[21571]: warning: unknown[121.40.64.229]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇵🇾 SecOpsSL	2026-08-29 00:18:30 (3 days ago)	121.40.64.229 - - \[28/Aug/2026:01:57:47 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 508 "-" "- ... show more 121.40.64.229 - - \[28/Aug/2026:01:57:47 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 508 "-" "-" 2 show less	Hacking Web App Attack
🇨🇿 lp	2026-08-25 22:50:42 (6 days ago)	Email account brute force: 1 attempts were recorded from 121.40.64.229 2026-08-26T00:35:38+02:00 war ... show more Email account brute force: 1 attempts were recorded from 121.40.64.229 2026-08-26T00:35:38+02:00 warning: unknown[121.40.64.229]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 VHosting	2026-08-25 11:10:07 (1 week ago)	Detected mail brute force attack from different servers	Brute-Force
🇭🇺 Lacika555	2026-08-18 12:25:15 (2 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇮🇩 sockominfo	2026-08-14 22:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 21:00:11 (2 weeks ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-03 12:00:53 (4 weeks ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-03 11:00:53 (4 weeks ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-03 10:00:09 (4 weeks ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 5.8/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 5.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 COMPLEX	2026-07-27 22:41:51 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇮🇩 sockominfo	2026-07-27 10:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 09:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 08:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 07:00:10 (1 month ago)	Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 4.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 121.40.64.229. Threat Score: 4.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇭 202.79.29.108

🇬🇧 195.206.182.213

🇷🇴 193.46.255.86

🇮🇳 182.70.255.242

🇷🇴 92.118.39.228

🇺🇸 67.198.126.135

🇺🇸 34.171.241.2

🇺🇸 23.95.193.99

🇷🇺 185.141.77.185

🇮🇳 171.76.81.7

🇮🇳 103.25.47.94

🇫🇷 91.196.152.124

🇷🇺 77.222.106.225

🇺🇸 64.225.8.171

🇬🇧 35.203.210.169

🇲🇽 186.96.133.232

🇦🇷 179.37.144.127

🇻🇳 171.244.5.210

🇺🇸 156.232.10.218

🇺🇸 129.158.59.245