JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.168.99

121.41.168.99 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 66%: ?

66%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.168.99

Whois 121.41.168.99

IP Abuse Reports for 121.41.168.99:

This IP address has been reported a total of 207 times from 71 distinct sources. 121.41.168.99 was first reported on March 12th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-20 02:03:01 (21 hours ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇫🇷 Duggy_Tuxy🧱	2026-06-15 12:41:40 (5 days ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇩🇪 anycast_ac	2026-06-14 10:07:45 (6 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: $ GET /favicon.ico HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 excill	2026-06-14 03:08:23 (6 days ago)	Honeypot mesh observed 1006 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇩🇪 anycast_ac	2026-06-14 00:15:19 (6 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: $ GET / HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇺🇸 ISPLtd	2026-06-13 06:32:56 (1 week ago)	Jun 13 00:32:54 121.41.168.99 TCP SPT=52373 DPT=30166 SYN Jun 13 00:32:55 121.41.168.99 TCP SPT=5237 ... show more Jun 13 00:32:54 121.41.168.99 TCP SPT=52373 DPT=30166 SYN Jun 13 00:32:55 121.41.168.99 TCP SPT=52373 DPT=13946 SYN Jun 13 00:32:56 121.41.168.99 TCP SPT=52373 DPT=10531 ... show less	Port Scan
🇫🇷 Fasetech	2026-06-12 18:02:56 (1 week ago)	SecLedge detected suspicious activity. Score: 3091.44. Sensor: T-Pot.	Brute-Force
🇩🇪 mattk	2026-06-07 11:11:00 (1 week ago)	port scan	Port Scan
🇺🇸 sandra361	2026-06-07 03:38:01 (1 week ago)	Port scan detected: 37 attempts across 37 ports (10123,10127,10333,10361,10452,1129,13560,14444,1510 ... show more Port scan detected: 37 attempts across 37 ports (10123,10127,10333,10361,10452,1129,13560,14444,15100,1519,16256,18086,1870,19991,20221,22103,2453,3103,34089,39016,4055,44333,49220,5028,50561,5320,5511,5699,60017,61137,6163,64005,6444,6970,7306,9058,9535). \| Evidence: GHOST_SCAN:IN=enp1s0 OUT= SRC=121.41.168.99 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=41618 PROTO=TCP SPT=43448 DPT=10361 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 03:06:42 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇭🇰 pengpeng	2026-06-05 08:12:41 (2 weeks ago)	monitor: on ser162528253480 \| port: 9443 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 9443 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Hobby Bob	2026-05-30 21:20:40 (3 weeks ago)	2026-05-30T21:20:39.852303+00:00 server dovecot: pop3-login: Disconnected: Connection closed (no aut ... show more 2026-05-30T21:20:39.852303+00:00 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=121.41.168.99, lip=X.X.X.X session= show less	Port Scan Hacking
🇫🇷 ISPLtd	2026-05-30 02:13:35 (3 weeks ago)	May 29 23:13:34 121.41.168.99 TCP SPT=47209 DPT=14921 SYN May 29 23:13:35 121.41.168.99 TCP SPT=4720 ... show more May 29 23:13:34 121.41.168.99 TCP SPT=47209 DPT=14921 SYN May 29 23:13:35 121.41.168.99 TCP SPT=47209 DPT=34021 SYN May 29 23:13:35 121.41.168.99 TCP SPT=47209 DPT=7412 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 09:12:50 (3 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 baltic-lab.com	2026-05-27 04:50:07 (3 weeks ago)	2026-05-27T06:48:19.533151+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-27T06:48:19.533151+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.168.99 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26486 PROTO=TCP SPT=57243 DPT=35153 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:49:00.592418+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.168.99 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=9135 PROTO=TCP SPT=57243 DPT=40607 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:49:18.724562+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.168.99 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=15335 PROTO=TCP SPT=57243 DPT=44108 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:49:38.957421+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.41.168.99 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=29312 PROTO=TCP SPT=57243 DPT=22819 WINDOW ... show less	Brute-Force Hacking

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.241.149.15

🇲🇽 187.191.48.4

🇭🇰 165.154.6.75

🇨🇳 111.26.115.124

🇧🇷 69.6.251.43

🇨🇳 60.25.69.186

🇬🇧 35.203.210.31

🇭🇰 152.32.171.73

🇮🇳 125.23.183.138

🇬🇪 80.241.252.26

🇳🇱 45.74.59.2

🇮🇳 210.18.176.239

🇦🇷 181.104.2.65

🇮🇳 168.144.92.125

🇳🇱 160.119.76.57

🇺🇸 135.237.124.103

🇸🇬 94.231.206.153

🇳🇱 92.63.197.5

🇺🇸 20.29.22.204

🇮🇳 152.52.196.134