JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.164.100

121.41.164.100 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 68%: ?

68%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.164.100

Whois 121.41.164.100

IP Abuse Reports for 121.41.164.100:

This IP address has been reported a total of 172 times from 59 distinct sources. 121.41.164.100 was first reported on March 12th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 baltic-lab.com	2026-06-07 00:40:12 (2 days ago)	2026-06-07T02:39:27.182188+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-07T02:39:27.182188+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.100 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=38949 PROTO=TCP SPT=52762 DPT=4021 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-07T02:39:48.728026+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.100 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=37628 PROTO=TCP SPT=52762 DPT=391 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-07T02:40:02.317841+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.100 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=35145 PROTO=TCP SPT=52762 DPT=712 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-07T02:40:03.575546+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.100 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=48479 PROTO=TCP SPT=52762 DPT=3401 WINDOW= ... show less	Brute-Force Hacking
🇺🇸 donarev419	2026-06-04 06:23:40 (5 days ago)	Connection to port 4558 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 donarev419	2026-06-03 02:29:09 (6 days ago)	Connection to port 8408 with data transfer. Data preview:	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-06-02 03:16:04 (1 week ago)	Honeypot hit: HTTP request on 8323	Hacking Bad Web Bot
🇭🇰 PingMeMaybe	2026-06-01 19:55:01 (1 week ago)	Blocked by UFW on hk [6389/tcp] Source port: 43695 TTL: 236 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on hk [6389/tcp] Source port: 43695 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 19:56:12 (1 week ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 15:10:25 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-27 14:36:21 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 mutebot.net	2026-05-26 06:55:06 (2 weeks ago)	SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=26927 SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=54 ... show more SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=26927 SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=54825 SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=58316 SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=64164 SRC=121.41.164.100, PROTO=TCP, SPT=58502, DPT=1703 show less	Port Scan
🇹🇷 Threat.live	2026-05-25 12:55:02 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇫🇷 dwmp	2026-05-21 21:34:07 (2 weeks ago)	May 21 23:33:53 plesk postfix/smtpd[879607]: lost connection after CONNECT from unknown[121.41.164.1 ... show more May 21 23:33:53 plesk postfix/smtpd[879607]: lost connection after CONNECT from unknown[121.41.164.100] May 21 23:33:54 plesk postfix/smtpd[879607]: lost connection after CONNECT from unknown[121.41.164.100] May 21 23:34:06 plesk postfix/smtpd[879607]: lost connection after CONNECT from unknown[121.41.164.100] ... show less	Brute-Force SSH
Anonymous	2026-05-19 05:57:22 (3 weeks ago)	May 19 01:57:21 localhost kernel: [107515586.183774] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 19 01:57:21 localhost kernel: [107515586.183774] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.164.100 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=46090 PROTO=TCP SPT=50239 DPT=6131 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:57:21 localhost kernel: [107515586.183813] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.164.100 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=46090 PROTO=TCP SPT=50239 DPT=6131 SEQ=20169607 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:57:21 localhost kernel: [107515586.706846] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.164.100 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=43254 PROTO=TCP SPT=50239 DPT=57992 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:57:21 localhost kernel: [107515586.706868] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.164.100 DST=[mungedIP2] LEN=40 TO show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 22:57:21 (3 weeks ago)	ThreatBook Intelligence: gameserver,Scanner more details on https://threatbook.io/ip/121.41.164.100 ... show more ThreatBook Intelligence: gameserver,Scanner more details on https://threatbook.io/ip/121.41.164.100 2026-05-17 01:42:27 / 2026-05-17 09:23:10 / show less	Web App Attack
🇺🇸 masterguru	2026-05-17 10:16:36 (3 weeks ago)	Port Scan detected from 121.41.164.100 (CN/China/-). 11 hits in the last 117 seconds (0-165)	Port Scan
🇨🇳 ThreatBook.io	2026-05-14 23:09:24 (3 weeks ago)	ThreatBook Intelligence: gameserver,Scanner more details on https://threatbook.io/ip/121.41.164.100 ... show more ThreatBook Intelligence: gameserver,Scanner more details on https://threatbook.io/ip/121.41.164.100 2026-05-14 00:40:35 / show less	Web App Attack

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.250.52.101

🇩🇪 213.209.159.56

🇧🇪 198.235.24.231

🇲🇳 180.149.125.163

🇩🇪 176.65.132.117

🇺🇸 162.217.167.92

🇧🇪 130.211.97.39

🇰🇷 118.220.149.121

🇻🇳 118.71.57.208

🇨🇦 85.217.149.36

🇺🇸 64.62.197.102

🇺🇸 47.17.167.176

🇳🇱 45.148.10.157

🇺🇸 34.106.196.213

🇰🇷 34.64.135.237

🇯🇵 152.32.202.250

🇧🇬 108.165.233.132

🇨🇳 101.126.147.62

🇺🇸 91.230.168.166

🇺🇸 91.230.168.162