JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.40.85.243

121.40.85.243 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.40.85.243

Whois 121.40.85.243

IP Abuse Reports for 121.40.85.243:

This IP address has been reported a total of 80 times from 26 distinct sources. 121.40.85.243 was first reported on June 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Bankbook8585	2026-06-26 02:33:45 (1 day ago)	T-Pot honeypot \| Dionaea honeypot: mysqld	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-06-26 00:55:10 (1 day ago)	Port Scan Attack proto:TCP src:46992 dst:3306	Port Scan
🇩🇪 Hary74656	2026-06-25 19:36:42 (1 day ago)	Jun 25 20:03:34 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts i ... show more Jun 25 20:03:34 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=78.46.107.184, TLS, session=<BrJizxdVYKZ5KFXz> Jun 25 20:26:51 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=78.46.107.184, TLS, session=<hA+wIhhV8Mx5KFXz> Jun 25 20:50:09 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=78.46.107.184, TLS, session=<MnYFdhhVbId5KFXz> Jun 25 21:13:26 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=78.46.107.184, TLS, session=<aD9HyRhVsq55KFXz> Jun 25 21:36:38 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<ma ... show less	Brute-Force
🇫🇷 basing	2026-06-25 19:14:19 (1 day ago)	2026-06-25 20:14:19 pzb SASL PLAIN auth failed: rhost=121.40.85.243...	Brute-Force
🇩🇪 onlyops.app	2026-06-25 19:00:03 (1 day ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇫🇮 [email protected]	2026-06-25 18:47:00 (1 day ago)	Attack attempt against Interwebbi servers; (imapd) Failed IMAP login from 121.40.85.243 (CN/China/-) ... show more Attack attempt against Interwebbi servers; (imapd) Failed IMAP login from 121.40.85.243 (CN/China/-): 5 in the last 3600 secs; IP: 121.40.85.243; Ports: *; Direction: 0; Trigger: LF_IMAPD; show less	Brute-Force
🇩🇪 netclix.gr	2026-06-25 18:42:00 (1 day ago)	(imapd) Failed IMAP login from 121.40.85.243 (CN/China/-)	Brute-Force
🇳🇱 big-cloud.nl	2026-06-25 18:10:56 (1 day ago)	Unauthorized IMAP/POP3 connection attempt	Brute-Force
🇩🇪 FeG Deutschland	2026-06-25 17:56:09 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇺 DZBOT	2026-06-25 17:52:00 (1 day ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force
🇺🇸 TAY	2026-06-25 17:51:42 (1 day ago)	2026-06-26 01:51:40 auth-worker(346153): Info: sql([email protected],121.40.85.243,<kGj7pBdVUNh5KFXz ... show more 2026-06-26 01:51:40 auth-worker(346153): Info: sql([email protected],121.40.85.243,<kGj7pBdVUNh5KFXz>): unknown user 2026-06-26 01:51:42 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=162.220.160.187, TLS, session=<kGj7pBdVUNh5KFXz> ... show less	Brute-Force
🇫🇷 smtp.com.es	2026-06-25 17:51:22 (1 day ago)	Brute force attempt.	Brute-Force Email Spam
🇫🇷 bongcloud.de	2026-06-25 15:51:51 (2 days ago)	Jun 25 17:26:09 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<pos ... show more Jun 25 17:26:09 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=62.171.133.42, TLS, session=<5m1unBVViNl5KFXz> Jun 25 17:51:50 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=62.171.133.42, TLS, session=<g41G+BVVLo55KFXz> ... show less	Brute-Force SSH
🇩🇪 oviliz	2026-06-25 14:31:56 (2 days ago)	Jun 25 14:41:15 mail wildduck-server[789]: info Gelf {"short_message":"WILDDUCK [AUTHFAIL] support@m ... show more Jun 25 14:41:15 mail wildduck-server[789]: info Gelf {"short_message":"WILDDUCK [AUTHFAIL] [email protected]","_error":"Unknown user","_auth_result":"unknown","_username":"[email protected]","_domain":"maisonandeve.com","_scope":"imap","_ip":"121.40.85.243","_sess":"c3vipdj3gmbtbaor","facility":"wildduck","host":"mail","timestamp":1782394875.451,"_component":"wildduck"} Jun 25 15:06:35 mail wildduck-server[789]: info Gelf {"short_message":"WILDDUCK [AUTHFAIL] [email protected]","_error":"Unknown user","_auth_result":"unknown","_username":"[email protected]","_domain":"maisonandeve.com","_scope":"imap","_ip":"121.40.85.243","_sess":"uybun6p6w2lmw3k5","facility":"wildduck","host":"mail","timestamp":1782396395.572,"_component":"wildduck"} Jun 25 15:31:55 mail wildduck-server[789]: info Gelf {"short_message":"WILDDUCK [AUTHFAIL] [email protected]","_error":"Unknown user","_auth_result":"unknown","_username":"[email protected]","_domain":"mais ... show less	Brute-Force
🇫🇷 bongcloud.de	2026-06-25 14:09:50 (2 days ago)	Jun 25 15:44:28 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<sup ... show more Jun 25 15:44:28 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=62.171.133.42, TLS, session=<jz/EMBRVYrx5KFXz> Jun 25 16:09:50 web dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.40.85.243, lip=62.171.133.42, TLS, session=<CAZ9ixRVOt95KFXz> ... show less	Brute-Force SSH

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.219

🇨🇳 42.51.41.252

🇯🇵 20.89.45.57

🇩🇪 2.26.252.153

🇨🇳 218.25.89.208

🇫🇷 212.83.143.140

🇺🇸 66.29.155.30

🇯🇵 43.206.228.38

🇷🇺 178.74.110.94

🇨🇳 117.89.254.46

🇳🇱 89.42.231.160

🇳🇱 45.156.87.253

🇬🇧 2a06:4883:d000::e4

🇩🇪 2400:cb00:1041:1000:5a22:bc83:6248:fe90

🇫🇮 147.185.133.36

🇭🇰 112.120.171.95

🇮🇳 106.215.146.65

🇺🇸 103.250.80.169

🇯🇵 54.248.45.239

🇳🇱 45.156.87.50