121.11.113.243

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
97% Critical
28 reports
19 reporters · latest 22 minutes ago
ISP
CHINANET Guangdong province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇧🇷 Brazil 5 🇮🇩 Indonesia 5
Most common categories Port Scan 20 Hacking 10 IoT Targeted 3 Brute-Force 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇦 DRI
Unsolicited UDP traffic on Honeypot, srcport=41367 dstport=9034
Port Scan Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 121.11.113.243
Hacking IoT Targeted
🇮🇩 leomardsy_
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-10T23:58Z).
Port Scan
🇺🇸 anon333
Hacker syslog review 1794342787
Hacking
🇧🇷 diego
[rede-arem1] 11/10/2026-09:17:27.390024, 121.11.113.243, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 121.11.113.243
Hacking IoT Targeted
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: PTR record not found
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-09:22:51.626099, 121.11.113.243, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇮🇩 leomardsy_
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 121.11.113.243
Hacking IoT Targeted
🇮🇩 leomardsy_
Port Scan
🇺🇸 MPL
tcp/5555
Port Scan
🇫🇮 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 5555) Source port: 9999 TTL: 43 Packet length: 40 TOS: 0x08 This report (for 121.11.113.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 139.19.117.130
🇧🇩 103.41.244.13
🇸🇬 206.189.95.232
🇧🇪 198.235.24.180
🇮🇳 152.59.120.252
🇫🇷 91.231.89.237
🇳🇱 45.66.35.36
🇬🇧 35.203.211.49
🇬🇧 35.203.210.97
🇺🇸 185.180.141.12
🇫🇷 178.20.213.42
🇬🇧 123.58.207.140
🇧🇬 79.124.40.106
🇺🇸 69.10.97.111
🇹🇭 203.156.108.110
🇧🇷 201.182.97.222
🇬🇧 195.96.139.6
🇬🇧 193.163.125.17
🇳🇱 192.42.116.16
🇬🇧 188.240.59.21
feedback