JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.166.1

121.41.166.1 was found in our database!

This IP was reported 217 times. Confidence of Abuse is 58%: ?

58%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.166.1

Whois 121.41.166.1

IP Abuse Reports for 121.41.166.1:

This IP address has been reported a total of 217 times from 65 distinct sources. 121.41.166.1 was first reported on March 25th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 pearbright	2026-07-08 15:27:33 (3 hours ago)	2026-07-08T15:27:17.903619+00:00 srv1093252 kernel: [4270411.818544] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-08T15:27:17.903619+00:00 srv1093252 kernel: [4270411.818544] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.41.166.1 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=37159 PROTO=TCP SPT=44437 DPT=17890 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-08T15:27:22.992549+00:00 srv1093252 kernel: [4270416.907470] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.41.166.1 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=34433 PROTO=TCP SPT=44437 DPT=10803 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-08T15:27:24.292724+00:00 srv1093252 kernel: [4270418.207724] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.41.166.1 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=51500 PROTO=TCP SPT=44437 DPT=31520 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-08T15:27:24.529710+00:00 srv1093252 kernel: [4270418.444627] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.41.166.1 DST ... show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-07-02 20:59:21 (5 days ago)	Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-mnz6-4)	Hacking
🇫🇷 Fasetech	2026-07-01 12:25:10 (1 week ago)	SecLedge detected suspicious activity. Score: 3429.6. Sensor: T-Pot.	Brute-Force Web App Attack
🇩🇪 anycast_ac	2026-06-28 11:29:05 (1 week ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner show less	DDoS Attack
🇩🇰 SaltySoftworks	2026-06-26 03:28:21 (1 week ago)	2026-06-26T03:28:18.835707+00:00 kernel: TCP Attack: SRC=121.41.166.1 DST=[Masked] LEN=40 TOS=0x00 ... show more 2026-06-26T03:28:18.835707+00:00 kernel: TCP Attack: SRC=121.41.166.1 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=236 PROTO=TCP SPT=44497 DPT=33061 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇮🇩 PENJAGA.AUM	2026-06-26 01:56:09 (1 week ago)	121.41.166.1 - Attack: ET SCAN Nmap Scripting Engine User-Agent Detected (Nmap Scripting Engine)	Web App Attack SQL Injection Spoofing
🇫🇷 Fasetech	2026-06-25 01:46:43 (1 week ago)	SecLedge detected suspicious activity. Score: 3429.6. Sensor: T-Pot.	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-20 02:03:04 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-19 12:06:41 (2 weeks ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-bad-user-agent; Action=ban; Events ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-bad-user-agent; Action=ban; Events=2; Hosts=45.137.198.87; Paths=/nmaplowercheck1781870112,/sdk; Country=CN; ASN=37963 Hangzhou Alibaba Advertising Co.,Ltd. show less	Hacking
🇺🇸 ISPLtd	2026-06-14 12:01:55 (3 weeks ago)	Jun 14 06:01:48 121.41.166.1 TCP SPT=58503 DPT=45897 SYN Jun 14 06:01:52 121.41.166.1 TCP SPT=58503 ... show more Jun 14 06:01:48 121.41.166.1 TCP SPT=58503 DPT=45897 SYN Jun 14 06:01:52 121.41.166.1 TCP SPT=58503 DPT=42557 SYN Jun 14 06:01:54 121.41.166.1 TCP SPT=58503 DPT=46042 ... show less	Port Scan
🇺🇸 sandra361	2026-06-09 07:23:41 (4 weeks ago)	Port scan detected: 97 attempts across 36 ports (10174,10608,10704,10997,11028,11303,11608,12233,132 ... show more Port scan detected: 97 attempts across 36 ports (10174,10608,10704,10997,11028,11303,11608,12233,13205,14888,16602,20201,21077,2134,2242,23036,2830,300,3326,34999,39400,4045,4096,4802,48030,6056,6333,6372,65501,7066,7098,7432,8564,8779,9189,9960). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=121.41.166.1 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=47351 PROTO=TCP SPT=49786 DPT=10174 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-08 13:18:50 (1 month ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇩🇪 excill	2026-06-08 03:06:03 (1 month ago)	Honeypot mesh observed 915 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-05 10:29:55 (1 month ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 kingjan1999	2026-05-31 07:03:41 (1 month ago)	Blocked by UFW [33490/tcp] \| SPT: 51018 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [33490/tcp] \| SPT: 51018 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 217 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.126.105.42

🇧🇷 177.221.216.83

🇨🇳 106.13.48.156

🇫🇷 104.28.211.187

🇺🇿 91.229.163.5

🇺🇸 52.248.43.226

🇨🇦 20.151.8.135

🇹🇷 176.88.91.75

🇸🇬 139.99.74.35

🇺🇸 104.28.195.186

🇩🇪 85.16.128.130

🇹🇭 203.154.158.195

🇬🇧 185.216.145.164

🇭🇰 152.32.254.89

🇺🇸 150.107.38.221

🇺🇸 144.202.92.17

🇺🇸 134.199.209.2

🇬🇧 118.193.65.234

🇫🇷 93.5.178.140

🇨🇦 89.251.0.208