JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.41.171.138

121.41.171.138 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 62%: ?

62%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.41.171.138

Whois 121.41.171.138

IP Abuse Reports for 121.41.171.138:

This IP address has been reported a total of 167 times from 53 distinct sources. 121.41.171.138 was first reported on March 16th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Little Iguana	2026-06-07 15:15:03 (7 hours ago)	trying to access non-authorized port	Port Scan
🇬🇧 PeravixGroup	2026-06-04 23:26:55 (2 days ago)	Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aar ... show more Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud show less	Brute-Force
🇬🇧 PeravixGroup	2026-05-30 10:05:45 (1 week ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-05-30 06:22:48 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 Hobby Bob	2026-05-28 18:12:33 (1 week ago)	May 28 18:12:33 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 s ... show more May 28 18:12:33 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=121.41.171.138, lip=X.X.X.X session= show less	Port Scan Hacking
🇨🇳 pengpeng	2026-05-28 11:39:07 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 63674 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 63674 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-05-26 12:08:34 (1 week ago)	SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=24232 SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=37 ... show more SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=24232 SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=37077 SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=15498 SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=51183 SRC=121.41.171.138, PROTO=TCP, SPT=57305, DPT=13674 show less	Port Scan
🇫🇷 Fasetech	2026-05-25 09:55:48 (1 week ago)	SecLedge detected suspicious activity. Score: 138.96. Sensor: T-Pot.	Brute-Force
🇫🇷 Little Iguana	2026-05-24 11:06:36 (2 weeks ago)	trying to access non-authorized port	Port Scan
🇩🇪 acadeova	2026-05-23 22:52:46 (2 weeks ago)	Blocked by UFW on vps2 [54110/tcp] Source port: 56752 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [54110/tcp] Source port: 56752 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-22 15:46:17 (2 weeks ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
Anonymous	2026-05-20 23:48:41 (2 weeks ago)	Port Scan detected from 121.41.171.138 (CN/China/-). 16 hits in the last 100 seconds	Web App Attack
🇨🇳 ThreatBook.io	2026-05-19 00:16:34 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026-05-18 07:50:12 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-18 00:27:34 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026-05-17 03:25:02 / 2026-05-17 07:30:32 / 2026-05-17 03:25:02 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-17 00:31:08 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.41.171.138 2026-05-16 00:31:20 / 2026-05-16 00:31:20 /owa/auth/15.0.1130/themes/resources/favicon.ico show less	Web App Attack

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.132

🇨🇳 171.37.46.239

🇺🇸 146.70.172.169

🇨🇱 190.46.77.254

🇩🇪 167.94.146.55

🇺🇸 107.167.34.125

🇮🇩 103.152.242.106

🇮🇩 46.202.138.211

🇬🇧 5.226.140.66

🇪🇸 217.154.106.153

🇺🇸 173.61.94.76

🇮🇳 168.220.237.171

🇺🇸 154.28.193.183

🇨🇳 111.17.199.57

🇬🇧 92.27.101.99

🇳🇱 89.106.86.98

🇵🇱 64.176.65.85

🇬🇧 31.14.254.84

🇮🇩 2a02:4780:6:1253:0:172e:eeb5:1

🇺🇸 205.210.31.37