JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.164.195

121.41.164.195 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 31%: ?

31%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.164.195

Whois 121.41.164.195

IP Abuse Reports for 121.41.164.195:

This IP address has been reported a total of 163 times from 55 distinct sources. 121.41.164.195 was first reported on March 23rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Net Storm	2026-07-12 09:07:52 (2 days ago)	IoT/ICS honeypot capture (NSVPS-SOC): IoT/ICS scan on 37 connections; protocols: MQTT; ports: 1883; ... show more IoT/ICS honeypot capture (NSVPS-SOC): IoT/ICS scan on 37 connections; protocols: MQTT; ports: 1883; active exploitation: 3660 bytes sent show less	Port Scan Hacking Exploited Host IoT Targeted
🇺🇸 k3rn3l109	2026-07-03 21:19:54 (1 week ago)	Sentinel honeypot: opencanary-redis hit on fake Redis service (server-01-CA) UA=opencanary	Port Scan Hacking
🇫🇷 ISPLtd	2026-07-01 03:43:52 (1 week ago)	Jul 1 00:43:44 121.41.164.195 TCP SPT=57419 DPT=7200 SYN Jul 1 00:43:47 121.41.164.195 TCP SPT=574 ... show more Jul 1 00:43:44 121.41.164.195 TCP SPT=57419 DPT=7200 SYN Jul 1 00:43:47 121.41.164.195 TCP SPT=57419 DPT=11112 SYN Jul 1 00:43:51 121.41.164.195 TCP SPT=57419 DPT=3399 ... show less	Port Scan
🇭🇰 PingMeMaybe	2026-06-07 05:00:38 (1 month ago)	Blocked by UFW on hk [11031/tcp] Source port: 48410 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [11031/tcp] Source port: 48410 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 baltic-lab.com	2026-06-02 16:25:05 (1 month ago)	2026-06-02T18:22:12.859153+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-02T18:22:12.859153+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.195 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=32599 PROTO=TCP SPT=57332 DPT=25607 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T18:22:31.637207+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.195 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=36039 PROTO=TCP SPT=57332 DPT=7539 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T18:22:51.035584+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.195 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=44372 PROTO=TCP SPT=57332 DPT=53274 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-02T18:23:08.745014+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.164.195 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=635 PROTO=TCP SPT=57332 DPT=9814 WINDO ... show less	Brute-Force Hacking
🇨🇳 pengpeng	2026-05-27 16:23:39 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 37121 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 37121 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-05-26 05:50:03 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇬🇧 PeravixGroup	2026-05-23 07:10:28 (1 month ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 acadeova	2026-05-21 14:29:00 (1 month ago)	🚨 Recon detected (nft drop) SRC=121.41.164.195 Observed=TCP dpt=61495 in=enp0s6 ttl=241 Time=recent( ... show more 🚨 Recon detected (nft drop) SRC=121.41.164.195 Observed=TCP dpt=61495 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-18 22:56:30 (1 month ago)	ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.41.164.195 2 ... show more ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.41.164.195 2026-05-18 04:02:33 / 2026-05-18 00:14:05 /favicon.ico 2026-05-18 00:14:05 / show less	SSH
🇨🇭 ScanThe.Net	2026-05-18 05:24:53 (1 month ago)	ID: 3319878091 \| PORT: 25842 \| https://121-41-164-195.scanthe.net	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 22:57:56 (1 month ago)	ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.41.164.195 2 ... show more ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/121.41.164.195 2026-05-17 09:46:08 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-14 23:09:54 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.164.195	SSH
Anonymous	2026-05-10 10:33:54 (2 months ago)	Unauthorized access attempt.	Brute-Force Web App Attack
Anonymous	2026-05-09 08:03:52 (2 months ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 212.127.91.29

🇹🇭 202.29.235.12

🇳🇱 195.178.110.26

🇷🇺 176.196.107.174

🇺🇸 173.252.70.143

🇩🇪 167.94.146.42

🇦🇺 158.178.141.16

🇧🇩 103.173.30.139

🇷🇺 80.82.58.12

🇳🇱 45.148.10.157

🇧🇷 205.210.31.155

🇧🇷 201.15.149.254

🇮🇷 195.214.235.78

🇺🇸 185.243.5.116

🇳🇱 185.242.226.126

🇺🇸 173.252.70.137

🇺🇸 162.216.149.249

🇨🇳 123.14.125.235

🇮🇳 80.225.241.76

🇬🇧 35.203.210.150