AbuseIPDB » 121.42.238.137

121.42.238.137 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co. Ltd
Usage Type	Data Center/Web Hosting/Transit
Domain Name	aliyun.com
Country	China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 121.42.238.137

Whois 121.42.238.137

IP Abuse Reports for 121.42.238.137:

This IP address has been reported a total of 127 times from 36 distinct sources. 121.42.238.137 was first reported on November 2nd 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
shaunc	2023-12-10 19:59:14 (1 hour ago)	Dec 10 13:47:19 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:0c:81:26:30:b8:78: ... show moreDec 10 13:47:19 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:0c:81:26:30:b8:78:08:00 SRC=121.42.238.137 DST=[redacted] LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=11959 PROTO=TCP SPT=40098 DPT=23 WINDOW=45450 RES=0x00 SYN URGP=0 Dec 10 13:58:00 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:0c:81:26:30:b8:78:08:00 SRC=121.42.238.137 DST=[redacted] LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=11959 PROTO=TCP SPT=40098 DPT=23 WINDOW=45450 RES=0x00 SYN URGP=0 Dec 10 13:59:12 [redacted] kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:0c:81:26:30:b8:78:08:00 SRC=121.42.238.137 DST=[redacted] LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=11959 PROTO=TCP SPT=40098 DPT=23 WINDOW=45450 RES=0x00 SYN URGP=0 show less	Port Scan
Block Rockin' Beats	2023-12-10 11:10:02 (9 hours ago)	Attempted connection to TCP port 23	Port Scan
ASPAN	2023-12-10 02:05:26 (18 hours ago)	Unsolicited connection attempt(s), port:23.	Port Scan
ASPAN	2023-12-10 02:05:26 (18 hours ago)	Unsolicited connection attempt(s), port:23.	Port Scan
urnilxfgbez	2023-12-09 23:45:00 (21 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=135\|DPT=5900\|DPT=1433)	Port Scan
ASPAN	2023-12-09 22:03:06 (23 hours ago)	Unsolicited connection attempt(s), port:23.	Port Scan
ASPAN	2023-12-09 22:03:06 (23 hours ago)	Unsolicited connection attempt(s), port:23.	Port Scan
abuse_IP_reporter	2023-12-09 10:45:03 (1 day ago)	Dec 9 11:46:06 server UFW BLOCK SRC=121.42.238.137 PROTO=TCP SPT=40098 DPT=23	Port Scan
MPL	2023-12-09 00:52:20 (1 day ago)	tcp/23 (5 or more attempts)	Port Scan
MPL	2023-12-09 00:52:20 (1 day ago)	tcp/23	Port Scan
NDCrawshaw	2023-12-09 00:00:00 (1 day ago)	Erroneous Connections to port(s) (23) (2 Events between 2023-12-09 00:00 and 2023-12-10 00:00)	Port Scan
ISPLtd	2023-12-08 06:30:30 (2 days ago)	Dec 8 02:29:26 SRC=121.42.238.137 PROTO=TCP SPT=40098 DPT=2323 SYN Dec 8 02:29:34 SRC=121.42 ... show moreDec 8 02:29:26 SRC=121.42.238.137 PROTO=TCP SPT=40098 DPT=2323 SYN Dec 8 02:29:34 SRC=121.42.238.137 PROTO=TCP SPT=40098 DPT=23 SYN Dec 8 02:30:30 SRC=121.42.238.137 PROTO=TCP SPT=40098 DPT=23 ... show less	Port Scan
RAP	2023-12-08 02:12:15 (2 days ago)	2023-12-08 02:12:15 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
January	2023-12-08 01:24:53 (2 days ago)	Attempted telnet login on port 23 with username root	Brute-Force
stroytrest	2023-12-07 21:06:57 (2 days ago)	2023-12-08T00:06:56.663743mx1 kernel: [12832610.831562] nftables: SCAN-TELNET IN=ens192 OUT= MAC= SR ... show more2023-12-08T00:06:56.663743mx1 kernel: [12832610.831562] nftables: SCAN-TELNET IN=ens192 OUT= MAC= SRC=121.42.238.137 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x08 PREC=0x40 TTL=39 ID=15634 PROTO=TCP SPT=40098 DPT=23 WINDOW=45450 RES=0x00 SYN URGP=0 MARK=0x9c ... show less	Port Scan