This IP address has been reported a total of
13
times from
8 distinct
sources.
121.183.211.2 was first reported on
September 15th 2026 , and the most recent report was
7 hours ago Indonesia
with 3
reports;
Brazil
with 2
reports;
Switzerland
with 2
reports.
The most common categories in these recent reports were:
Port Scan
9
times;
Hacking
5
times;
SSH
2
times;
Brute-Force
2
times;
Exploited Host
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
RAP
2026-09-26 14:16:34
(7 hours ago)
2026-09-26 14:16:34 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack
🇧🇷
noconex
2026-09-26 10:53:15
(11 hours ago)
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: Exploit (ET EXPLOIT Realtek SDK - Command Execution/ ...
show more
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: Exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) 121.183.211.2
show less
Port Scan
Brute-Force
SSH
🇧🇷
noconex
2026-09-24 10:20:13
(2 days ago)
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: Exploit (ET EXPLOIT Realtek SDK - Command Execution/ ...
show more
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: Exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) 121.183.211.2
show less
Port Scan
Brute-Force
SSH
🇮🇩
leomardsy_
2026-09-23 11:04:42
(3 days ago)
Port Scan
🇮🇪
RoboSOC
2026-09-21 21:13:13
(5 days ago)
TCP SYN with data , PTR: PTR record not found
Hacking
2026-09-20 19:32:07
(6 days ago)
suricata IPS/IDS detection, ruleset ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbou ...
show more
suricata IPS/IDS detection, ruleset ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
show less
Port Scan
🇮🇩
leomardsy_
2026-09-20 14:35:35
(6 days ago)
Port Scan
🇨🇭
SOC [GOLINE SA]
2026-09-17 04:58:00
(1 week ago)
IDS Alert: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) === A ...
show more
IDS Alert: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) === ATTACK === Signature: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) | SID: 2044008 | Severity: 1 | Category: Attempted Administrator Privilege Gain === SOURCE === IP: 121.183.211.2 (IPv4) | Port: 44391 | Country: South Korea | ISP: Unknown | rDNS: None === TARGET === Host: wireguard.goline.ch | IP: 185.54.80.7 | Port: 9034 | Protocol: UDP | App: failed === RESPONSE === Time: 2026-09-17 06:57:57 | Action: Blocked
show less
Exploited Host
Hacking
🇮🇩
leomardsy_
2026-09-16 05:00:43
(1 week ago)
Port Scan
🇬🇧
Axel
2026-09-15 21:16:24
(1 week ago)
Blocked by UFW on BGPGB [8080/tcp] | SPT: 9999 | TTL: 46 | LEN: 276 | TOS: 0x00 • Reported by: githu ...
show more
Blocked by UFW on BGPGB [8080/tcp] | SPT: 9999 | TTL: 46 | LEN: 276 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇨🇭
SOC [GOLINE SA]
2026-09-15 08:44:26
(1 week ago)
IDS Alert: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) === A ...
show more
IDS Alert: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) === ATTACK === Signature: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) | SID: 2044008 | Severity: 1 | Category: Attempted Administrator Privilege Gain === SOURCE === IP: 121.183.211.2 (IPv4) | Port: 44391 | Country: South Korea | ISP: Unknown | rDNS: None === TARGET === Host: wireguard.goline.ch | IP: 185.54.80.7 | Port: 9034 | Protocol: UDP | App: failed === RESPONSE === Time: 2026-09-15 10:44:23 | Action: Blocked
show less
Exploited Host
Hacking
🇮🇪
RoboSOC
2026-09-15 07:55:37
(1 week ago)
TCP SYN with data , PTR: PTR record not found
Hacking
2026-09-15 05:39:51
(1 week ago)
denied traffic to a honeypot network. destination port 9034.
Port Scan
Hacking
Showing 1 to
13
of 13 reports
