JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.167.96

121.41.167.96 was found in our database!

This IP was reported 176 times. Confidence of Abuse is 59%: ?

59%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.167.96

Whois 121.41.167.96

IP Abuse Reports for 121.41.167.96:

This IP address has been reported a total of 176 times from 55 distinct sources. 121.41.167.96 was first reported on March 16th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-06-09 01:16:58 (4 days ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇬🇧 PeravixGroup	2026-06-08 03:37:43 (5 days ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-05 17:59:38 (1 week ago)	Honeypot detection: Metasploit / penetration testing C2 callback attempt on port 4444. Severity: MED ... show more Honeypot detection: Metasploit / penetration testing C2 callback attempt on port 4444. Severity: MEDIUM. Aaran.cloud show less	Hacking
Anonymous	2026-06-02 09:03:48 (1 week ago)	Jun 2 05:03:46 localhost kernel: [108736343.487981] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 2 05:03:46 localhost kernel: [108736343.487981] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.96 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=35162 PROTO=TCP SPT=51025 DPT=9492 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 2 05:03:46 localhost kernel: [108736343.488000] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.96 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=35162 PROTO=TCP SPT=51025 DPT=9492 SEQ=3189296176 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 2 05:03:47 localhost kernel: [108736344.600986] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.96 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=39957 PROTO=TCP SPT=51025 DPT=15333 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 2 05:03:47 localhost kernel: [108736344.601012] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.41.167.96 DST=[mungedIP2] LEN=40 TOS= show less	Port Scan
🇬🇧 PeravixGroup	2026-05-30 07:45:17 (2 weeks ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 Fasetech	2026-05-28 16:18:36 (2 weeks ago)	SecLedge detected suspicious activity. Score: 154.8. Sensor: T-Pot.	Brute-Force
🇩🇪 centurion	2026-05-26 09:44:32 (2 weeks ago)	Blocked by UFW on ns02 [17677/tcp] Source port: 48671 TTL: 238 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on ns02 [17677/tcp] Source port: 48671 TTL: 238 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-05-26 06:40:00 (2 weeks ago)	121.41.167.96 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident coun ... show more 121.41.167.96 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3 show less	Port Scan
🇭🇰 PingMeMaybe	2026-05-25 02:04:18 (2 weeks ago)	Blocked by UFW on hk [32467/tcp] Source port: 54649 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [32467/tcp] Source port: 54649 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 DerDoktor	2026-05-21 23:10:02 (3 weeks ago)	I0521 22:16:45.88820 fail2ban action triggered	Port Scan Brute-Force SSH
🇧🇪 Saec	2026-05-21 00:48:11 (3 weeks ago)	Jarvis auto-ban: blocklist:binarydefense	Port Scan Web App Attack
🇩🇪 acadeova	2026-05-18 03:40:46 (3 weeks ago)	Blocked by UFW on vps2 [14480/tcp] Source port: 55607 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [14480/tcp] Source port: 55607 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 23:51:59 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.167.96 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.167.96 2026-05-17 00:55:42 / show less	Web App Attack
🇺🇸 baltic-lab.com	2026-05-10 10:55:05 (1 month ago)	2026-05-10T12:53:09.901270+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-10T12:53:09.901270+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.41.167.96 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=38458 PROTO=TCP SPT=50389 DPT=30062 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-10T12:53:10.981558+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.41.167.96 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=6808 PROTO=TCP SPT=50389 DPT=40873 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-10T12:53:13.718918+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.41.167.96 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=21660 PROTO=TCP SPT=50389 DPT=15231 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-10T12:53:26.055885+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:d0:e9:08:00 SRC=121.41.167.96 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=3224 PROTO=TCP SPT=50389 DPT=22102 WINDOW= ... show less	Brute-Force Hacking
🇩🇪 acadeova	2026-05-09 08:53:06 (1 month ago)	Blocked by UFW on vps2 [7913/tcp] Source port: 56769 TTL: 241 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on vps2 [7913/tcp] Source port: 56769 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇫🇷 195.154.112.90

🇬🇧 193.163.125.196

🇮🇳 182.70.243.207

🇻🇳 14.191.25.38

🇳🇱 195.178.110.30

🇳🇱 185.223.235.24

🇺🇸 162.216.149.215

🇺🇸 104.245.244.124

🇧🇩 103.154.49.130

🇷🇴 80.94.92.167

🇵🇭 61.28.144.154

🇺🇸 208.84.101.238

🇲🇽 189.203.190.153

🇧🇷 138.255.206.200

🇬🇧 45.43.64.151

🇸🇬 43.159.61.145

🇻🇳 210.211.122.97

🇩🇪 152.89.254.113

🇫🇷 148.135.179.204