JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.167.34

121.41.167.34 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 65%: ?

65%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.167.34

Whois 121.41.167.34

IP Abuse Reports for 121.41.167.34:

This IP address has been reported a total of 165 times from 55 distinct sources. 121.41.167.34 was first reported on March 23rd 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-07 12:49:57 (14 hours ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇨🇳 pengpeng	2026-06-05 05:14:00 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 30215 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 30215 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 masterguru	2026-06-04 02:17:14 (4 days ago)	Port Scan detected from 121.41.167.34 (CN/China/-). 11 hits in the last 15 seconds (0-165)	Port Scan
🇺🇸 sandra361	2026-06-02 20:58:02 (5 days ago)	Port scan detected: 30 attempts across 10 ports (16991,22813,25573,34065,37452,43930,44878,45642,577 ... show more Port scan detected: 30 attempts across 10 ports (16991,22813,25573,34065,37452,43930,44878,45642,57792,63671). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=121.41.167.34 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=43740 PROTO=TCP SPT=53867 DPT=44878 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-05-30 18:02:49 (1 week ago)	May 30 14:02:49 localhost kernel: [108509491.150735] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 30 14:02:49 localhost kernel: [108509491.150735] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.34 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=48417 PROTO=TCP SPT=44167 DPT=14251 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 14:02:49 localhost kernel: [108509491.150763] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.34 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=48417 PROTO=TCP SPT=44167 DPT=14251 SEQ=1426647796 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 14:02:49 localhost kernel: [108509491.443355] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.34 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=54672 PROTO=TCP SPT=44167 DPT=34658 WINDOW=1024 RES=0x00 SYN URGP=0 May 30 14:02:49 localhost kernel: [108509491.443377] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.34 DST=[mungedIP2] LEN=40 TO show less	Port Scan
🇺🇸 ISPLtd	2026-05-30 06:41:21 (1 week ago)	May 30 03:41:18 121.41.167.34 TCP SPT=43277 DPT=40182 SYN May 30 03:41:20 121.41.167.34 TCP SPT=4327 ... show more May 30 03:41:18 121.41.167.34 TCP SPT=43277 DPT=40182 SYN May 30 03:41:20 121.41.167.34 TCP SPT=43277 DPT=44749 SYN May 30 03:41:20 121.41.167.34 TCP SPT=43277 DPT=14205 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 20:07:46 (1 week ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 ISPLtd	2026-05-25 00:18:24 (2 weeks ago)	May 24 21:18:23 121.41.167.34 TCP SPT=48299 DPT=64497 SYN May 24 21:18:24 121.41.167.34 TCP SPT=4829 ... show more May 24 21:18:23 121.41.167.34 TCP SPT=48299 DPT=64497 SYN May 24 21:18:24 121.41.167.34 TCP SPT=48299 DPT=64338 SYN May 24 21:18:24 121.41.167.34 TCP SPT=48299 DPT=43727 ... show less	Port Scan
🇺🇸 mutebot.net	2026-05-24 14:30:53 (2 weeks ago)	SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=22817 SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=5434 ... show more SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=22817 SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=54342 SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=50718 SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=62044 SRC=121.41.167.34, PROTO=TCP, SPT=53042, DPT=65312 show less	Port Scan
🇫🇷 ISPLtd	2026-05-24 04:17:55 (2 weeks ago)	May 24 01:17:51 121.41.167.34 TCP SPT=56270 DPT=39029 SYN May 24 01:17:53 121.41.167.34 TCP SPT=5627 ... show more May 24 01:17:51 121.41.167.34 TCP SPT=56270 DPT=39029 SYN May 24 01:17:53 121.41.167.34 TCP SPT=56270 DPT=46844 SYN May 24 01:17:54 121.41.167.34 TCP SPT=56270 DPT=25133 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 13:14:50 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-23 02:20:37 (2 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-22 13:52:19 (2 weeks ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇩🇪 acadeova	2026-05-21 11:37:21 (2 weeks ago)	🚨 Recon detected (nft drop) SRC=121.41.167.34 Observed=TCP dpt=42420 in=enp0s6 ttl=241 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=121.41.167.34 Observed=TCP dpt=42420 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 ISPLtd	2026-05-19 10:46:28 (2 weeks ago)	May 19 04:46:20 121.41.167.34 TCP SPT=47574 DPT=20551 SYN May 19 04:46:27 121.41.167.34 TCP SPT=4757 ... show more May 19 04:46:20 121.41.167.34 TCP SPT=47574 DPT=20551 SYN May 19 04:46:27 121.41.167.34 TCP SPT=47574 DPT=5329 SYN May 19 04:46:27 121.41.167.34 TCP SPT=47574 DPT=29886 ... show less	Port Scan

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.199

🇬🇧 193.163.125.15

🇮🇷 185.226.119.178

🇩🇪 185.55.243.123

🇳🇱 172.94.9.65

🇨🇳 163.142.93.23

🇯🇵 159.26.119.143

🇺🇸 143.198.134.9

🇷🇺 83.237.80.34

🇺🇸 66.132.186.184

🇮🇩 34.101.59.30

🇧🇪 34.38.95.177

🇺🇸 2607:a400:c:312::9

🇳🇱 204.76.203.15

🇰🇷 203.142.160.143

🇧🇪 198.235.24.222

🇬🇧 192.248.150.180

🇨🇳 118.145.104.105

🇨🇳 116.179.37.116

🇷🇺 86.62.120.62