JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.66.125

121.40.66.125 was found in our database!

This IP was reported 188 times. Confidence of Abuse is 78%: ?

78%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.66.125

Whois 121.40.66.125

IP Abuse Reports for 121.40.66.125:

This IP address has been reported a total of 188 times from 65 distinct sources. 121.40.66.125 was first reported on March 11th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-06-18 22:57:48 (2 hours ago)	Port Scan detected from 121.40.66.125 (CN/China/-).	Port Scan
🇺🇸 en0	2026-06-16 00:00:09 (3 days ago)	121.40.66.125 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident coun ... show more 121.40.66.125 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇺🇸 Axel	2026-06-15 21:31:43 (3 days ago)	Blocked by UFW on MVI [32181/tcp] \| SPT: 59102 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on MVI [32181/tcp] \| SPT: 59102 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-14 01:33:06 (5 days ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇸🇬 baltic-lab.com	2026-06-12 19:51:28 (6 days ago)	Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇫🇷 ISPLtd	2026-06-10 02:24:17 (1 week ago)	Jun 9 23:24:15 121.40.66.125 TCP SPT=58252 DPT=37237 SYN Jun 9 23:24:16 121.40.66.125 TCP SPT=5825 ... show more Jun 9 23:24:15 121.40.66.125 TCP SPT=58252 DPT=37237 SYN Jun 9 23:24:16 121.40.66.125 TCP SPT=58252 DPT=21862 SYN Jun 9 23:24:17 121.40.66.125 TCP SPT=58252 DPT=40780 ... show less	Port Scan
🇺🇸 micropedro	2026-06-10 01:31:51 (1 week ago)	4 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 21:31 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 21:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇩🇪 kingjan1999	2026-06-08 01:47:02 (1 week ago)	Blocked by UFW [115/tcp] \| SPT: 43220 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [115/tcp] \| SPT: 43220 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇱 spd.co.il	2026-06-07 18:01:23 (1 week ago)	Port scan detected on multiple ports	Port Scan
🇭🇰 PingMeMaybe	2026-06-06 01:41:58 (1 week ago)	Blocked by UFW on hk [22034/tcp] Source port: 50074 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [22034/tcp] Source port: 50074 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ISPLtd	2026-06-05 23:43:23 (1 week ago)	Jun 5 20:43:21 121.40.66.125 TCP SPT=43000 DPT=5731 SYN Jun 5 20:43:21 121.40.66.125 TCP SPT=43000 ... show more Jun 5 20:43:21 121.40.66.125 TCP SPT=43000 DPT=5731 SYN Jun 5 20:43:21 121.40.66.125 TCP SPT=43000 DPT=10188 SYN Jun 5 20:43:22 121.40.66.125 TCP SPT=43000 DPT=9215 ... show less	Port Scan
🇸🇬 nayumi	2026-06-05 07:52:59 (1 week ago)	CrowdSec detection: crowdsecurity/http-bad-user-agent \| Service: http, http	Web App Attack
🇨🇳 WMK965	2026-06-04 09:56:45 (2 weeks ago)	121.40.66.125 - - [04/Jun/2026:17:56:37 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.40.66.125 ... show more 121.40.66.125 - - [04/Jun/2026:17:56:37 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.40.66.125 - - [04/Jun/2026:17:56:37 +0800] "OPTIONS / RTSP/1.0" 400 154 "-" "-" "-" 121.40.66.125 - - [04/Jun/2026:17:56:43 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" show less	Port Scan Web App Attack
🇭🇰 PingMeMaybe	2026-06-03 10:04:38 (2 weeks ago)	Blocked by UFW on hk [39500/tcp] Source port: 41068 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [39500/tcp] Source port: 41068 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ISPLtd	2026-06-03 07:25:27 (2 weeks ago)	Jun 3 01:25:23 121.40.66.125 TCP SPT=51522 DPT=28135 SYN Jun 3 01:25:23 121.40.66.125 TCP SPT=5152 ... show more Jun 3 01:25:23 121.40.66.125 TCP SPT=51522 DPT=28135 SYN Jun 3 01:25:23 121.40.66.125 TCP SPT=51522 DPT=41199 SYN Jun 3 01:25:25 121.40.66.125 TCP SPT=51522 DPT=52110 ... show less	Port Scan

Showing 1 to 15 of 188 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.140.214.26

🇨🇦 147.182.150.232

🇹🇼 140.235.38.170

🇳🇱 138.226.239.10

🇧🇷 129.121.42.131

🇧🇬 79.124.58.142

🇳🇱 45.156.87.119

🇨🇳 220.197.85.185

🇲🇽 187.174.238.116

🇧🇷 177.0.250.136

🇩🇪 162.19.175.119

🇨🇦 154.3.160.235

🇨🇳 139.170.72.5

🇵🇰 103.229.191.82

🇭🇰 103.106.188.32

🇺🇸 68.110.5.35

🇩🇪 64.226.126.10

🇳🇱 45.148.10.183

🇳🇱 45.142.193.131

🇺🇸 20.168.121.187