JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.41.165.113

Recent Activity

Abuse confidence score ?

100% Critical

284 reports

93 reporters · latest 17 hours ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 121.41.165.113

Export CSV

This IP address has been reported a total of 284 times from 93 distinct sources. 121.41.165.113 was first reported on November 29th 2023, and the most recent report was 17 hours ago. In the last 60 days, the top reporter locations were: Turkey with 34 reports; United States of America with 11 reports; Germany with 7 reports. The most common categories in these recent reports were: Hacking 35 times; Web App Attack 34 times; Port Scan 30 times; Brute-Force 7 times; SSH 5 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 k3rn3l109	2026-10-08 19:03:59 (17 hours ago)	Sentinel honeypot: scan-burst hit on plex.edgecdnhub.com UA=Mozilla/5.0 (compatible; Nmap Scripting ... show more Sentinel honeypot: scan-burst hit on plex.edgecdnhub.com UA=Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) show less	Hacking
Anonymous	2026-10-06 15:01:16 (2 days ago)	1791298875 - 10/06/2026 17:01:15 Host: 121.41.165.113/121.41.165.113 Port: 686 TCP Blocked ...	Port Scan
🇩🇪 evvsk	2026-10-06 02:18:01 (3 days ago)	UFW blocked port scan: 5 attempts against ports 9867, 18014, 2329, 6223, 16088	Port Scan
🇬🇧 Aetherweb Ark	2026-10-05 13:27:07 (3 days ago)	Port Scan detected from 121.41.165.113 (CN/China/-). N in the last X seconds	Port Scan
🇺🇸 schematics.cc	2026-10-05 02:06:40 (4 days ago)	Blocked by on honeypot2 [50812/tcp] \| SPT: 45984 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: abu ... show more Blocked by on honeypot2 [50812/tcp] \| SPT: 45984 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇮🇩 helouism	2026-10-03 13:53:59 (5 days ago)	Fail2Ban: Blocked by UFW for port scanning.	Port Scan DDoS Attack
🇨🇦 Arpan Sen	2026-10-03 02:59:59 (6 days ago)	Network port/address scan: probed 16 distinct port(s) across 1 host(s); 100% of connections received ... show more Network port/address scan: probed 16 distinct port(s) across 1 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇹🇷 neron	2026-10-02 10:06:42 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 Entalpi.net	2026-10-02 04:24:55 (1 week ago)	Repeatedly filtered for trying to reach closed ports	Port Scan
🇩🇪 xavier-momain.eu	2026-10-01 23:51:52 (1 week ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH
🇫🇷 Petre 21_ip	2026-10-01 17:46:56 (1 week ago)	2026-10-01T19:46:56.225289+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-10-01T19:46:56.225289+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=121.41.165.113 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=8424 PROTO=TCP SPT=56814 DPT=14290 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 screwlooseit.com.au	2026-10-01 15:26:20 (1 week ago)	Blocked by CSF 13 firewall - Rule: CN/China/-	Web App Attack
🇹🇷 neron	2026-10-01 10:06:38 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇭🇰 CyberFox	2026-10-01 07:25:05 (1 week ago)	2370/tcp,58315/tcp,52774/tcp,28601/tcp,26355/tcp,63858/tcp,39016/tcp,15328/tcp,4358/tcp,29505/tcp,44 ... show more 2370/tcp,58315/tcp,52774/tcp,28601/tcp,26355/tcp,63858/tcp,39016/tcp,15328/tcp,4358/tcp,29505/tcp,44711/tcp,56981/tcp,19211/tcp,13892/tcp,35440/tcp,39522/tcp,6448/tcp,25053/tcp,25834/tcp,56992/tcp,39045/tcp,36153/tcp,14678/tcp,37772/tcp,21091/tcp,20498/tcp,56808/tcp,43281/tcp (210 or more attempts) show less	Port Scan
🇭🇰 CyberFox	2026-09-29 20:03:31 (1 week ago)	28566/tcp,41404/tcp,56879/tcp,15350/tcp,23215/tcp,38483/tcp,41611/tcp,50154/tcp,54933/tcp,39212/tcp, ... show more 28566/tcp,41404/tcp,56879/tcp,15350/tcp,23215/tcp,38483/tcp,41611/tcp,50154/tcp,54933/tcp,39212/tcp,19838/tcp,26727/tcp,35092/tcp,57567/tcp,28126/tcp,26472/tcp,62007/tcp,49971/tcp,35154/tcp,18543/tcp,44144/tcp,50742/tcp,62659/tcp,61514/tcp,21573/tcp,53061/tcp,53322/tcp (224 or more attempts) show less	Port Scan

Showing 1 to 15 of 284 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.183.226

🇺🇸 166.62.41.13

🇺🇸 151.243.18.111

🇲🇦 105.157.233.27

🇱🇹 77.90.185.20

🇨🇳 43.248.108.18

🇦🇷 186.39.171.37

🇨🇳 183.198.254.222

🇳🇱 151.247.25.114

🇮🇳 117.193.107.143

🇳🇱 77.239.124.150

🇬🇧 77.67.26.181

🇺🇸 72.205.174.54

🇬🇧 51.195.183.240

🇺🇸 32.221.111.43

🇨🇦 217.181.82.205

🇺🇸 217.181.66.119

🇳🇱 195.178.110.228

🇩🇪 195.63.20.39

🇺🇦 194.44.54.163