JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.164.184

121.41.164.184 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 71%: ?

71%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.164.184

Whois 121.41.164.184

IP Abuse Reports for 121.41.164.184:

This IP address has been reported a total of 186 times from 60 distinct sources. 121.41.164.184 was first reported on March 12th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-11 19:20:07 (5 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2026-06-11 19:08:39 (5 hours ago)	Fail2Ban triggered	Web App Attack
🇫🇷 ISPLtd	2026-06-10 04:51:04 (1 day ago)	Jun 10 01:51:01 121.41.164.184 TCP SPT=47058 DPT=15424 SYN Jun 10 01:51:02 121.41.164.184 TCP SPT=47 ... show more Jun 10 01:51:01 121.41.164.184 TCP SPT=47058 DPT=15424 SYN Jun 10 01:51:02 121.41.164.184 TCP SPT=47058 DPT=15302 SYN Jun 10 01:51:03 121.41.164.184 TCP SPT=47058 DPT=34645 ... show less	Port Scan
🇩🇪 derLoosi	2026-06-09 13:13:17 (2 days ago)	HV1.2 Blocked by UFW	Port Scan
Anonymous	2026-06-01 13:27:11 (1 week ago)	Blocked by UFW (TCP on 10041) Source port: 40398 TTL: 248 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 10041) Source port: 40398 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 121.41.164.184) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-31 11:04:02 (1 week ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇩🇪 kingjan1999	2026-05-30 22:33:21 (1 week ago)	Blocked by UFW [43872/tcp] \| SPT: 40396 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [43872/tcp] \| SPT: 40396 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 14:22:00 (1 week ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇬🇧 PeravixGroup	2026-05-28 06:04:44 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 centurion	2026-05-24 23:18:22 (2 weeks ago)	Blocked by UFW on ns02 [28291/tcp] Source port: 44701 TTL: 238 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on ns02 [28291/tcp] Source port: 44701 TTL: 238 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 01:06:01 (2 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 Blexyel	2026-05-18 00:26:30 (3 weeks ago)	2026-05-18T02:22:51.997505+02:00 smol kernel: [337188.115070] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e: ... show more 2026-05-18T02:22:51.997505+02:00 smol kernel: [337188.115070] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=121.41.164.184 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=18846 PROTO=TCP SPT=43769 DPT=12264 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T02:23:02.388407+02:00 smol kernel: [337198.505964] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=121.41.164.184 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=62316 PROTO=TCP SPT=43769 DPT=64978 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T02:23:41.751372+02:00 smol kernel: [337237.868840] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=121.41.164.184 DST=152.53.227.155 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56462 PROTO=TCP SPT=43769 DPT=17397 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T02:24:23.584424+02:00 smol kernel: [337279.701725] [UFW BLOCK] IN=eth0 OUT= MAC=ea:8f:5e:28:cc:45:bc:0f:fe:3d:a3:a7:08:00 SRC=121.41.164.184 DST=152.53.227.15 ... show less	Port Scan Hacking Brute-Force
🇺🇸 knock	2026-05-14 22:40:18 (4 weeks ago)	Knock-Knock honeypot brute-force: RDP, proto8 (9 total hits)	Brute-Force
🇨🇳 ThreatBook.io	2026-05-11 23:07:14 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.164.184 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.164.184 2026-05-11 02:13:10 / show less	Web App Attack
🇺🇸 LockBlock	2026-05-11 00:51:49 (1 month ago)	2026-05-11 00:51:49: Port scan detected from 121.41.164.184 on port 12346 of racknerd-e7e1a9	Port Scan

Showing 1 to 15 of 186 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.223.62

🇺🇸 172.93.106.153

🇩🇪 152.53.140.132

🇺🇸 147.185.132.209

🇩🇪 93.94.51.50

🇷🇴 92.118.39.74

🇧🇬 91.191.209.98

🇩🇪 69.5.169.216

🇬🇧 35.203.210.89

🇬🇪 2.57.217.229

🇩🇪 213.209.159.242

🇺🇸 207.90.244.13

🇮🇳 202.141.101.140

🇭🇰 199.45.154.191

🇬🇧 195.140.214.27

🇺🇸 193.202.83.179

🇱🇧 185.104.253.168

🇨🇭 185.70.42.63

🇺🇸 184.105.247.207

🇺🇸 162.216.150.218