JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.118.104

121.43.118.104 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 66%: ?

66%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.118.104

Whois 121.43.118.104

IP Abuse Reports for 121.43.118.104:

This IP address has been reported a total of 151 times from 50 distinct sources. 121.43.118.104 was first reported on March 25th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 sandra361	2026-06-14 13:50:21 (4 hours ago)	Port scan detected: 44 attempts across 44 ports (10694,12127,13576,1398,15721,2163,22890,26434,27628 ... show more Port scan detected: 44 attempts across 44 ports (10694,12127,13576,1398,15721,2163,22890,26434,27628,28930,30482,32631,32760,33517,34584,34622,34810,37649,38310,41562,41733,45844,46051,46250,48398,50267,52609,54178,54532,54651,55936,57368,57599,5835,58476,59331,60076,60126,62014,65279,6907,7836,8373,9709). \| Evidence: GHOST_SCAN: IN=eth0 SRC=121.43.118.104 LEN=40 TOS=0x14 PREC=0x00 TTL=242 ID=47702 PROTO=TCP SPT=44962 DPT=13576 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇬🇧 PeravixGroup	2026-06-10 06:46:00 (4 days ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇨🇦 Blinker73	2026-06-07 14:13:56 (1 week ago)	2026-06-07T10:13 kernel: OUT= SRC=121.43.118.104 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=52397 PR ... show more 2026-06-07T10:13 kernel: OUT= SRC=121.43.118.104 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=52397 PROTO=TCP SPT=41634 DPT=2500 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-07T10:13 kernel: OUT= SRC=121.43.118.104 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=34377 PROTO=TCP SPT=41634 DPT=8235 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 excill	2026-06-07 03:04:03 (1 week ago)	Honeypot mesh observed 1020 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇫🇷 masterguru	2026-06-07 01:30:50 (1 week ago)	Port Scan detected from 121.43.118.104 (CN/China/-). 11 hits in the last 30 seconds (0-131)	Port Scan
Anonymous	2026-06-06 04:41:01 (1 week ago)	Port Scan detected from 121.43.118.104 (CN/China/-). 16 hits in the last 20 seconds	Web App Attack
🇩🇪 _ArminS_	2026-06-01 15:57:23 (1 week ago)	SP-Scan 49442:19002 detected 2026.06.01 17:57:23 blocked until 2026.07.21 11:00:10	Port Scan
Anonymous	2026-05-31 20:43:41 (1 week ago)	May 31 16:43:40 localhost kernel: [108605540.345737] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 31 16:43:40 localhost kernel: [108605540.345737] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.43.118.104 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=234 ID=6741 PROTO=TCP SPT=40219 DPT=61132 WINDOW=1024 RES=0x00 SYN URGP=0 May 31 16:43:40 localhost kernel: [108605540.345770] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.43.118.104 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=234 ID=6741 PROTO=TCP SPT=40219 DPT=61132 SEQ=2113508583 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 31 16:43:40 localhost kernel: [108605540.589387] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.43.118.104 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=26005 PROTO=TCP SPT=40219 DPT=42572 WINDOW=1024 RES=0x00 SYN URGP=0 May 31 16:43:40 localhost kernel: [108605540.589413] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=121.43.118.104 DST=[mungedIP2] LEN=40 show less	Port Scan
🇩🇪 acadeova	2026-05-31 11:05:42 (2 weeks ago)	🚨 Recon detected (nft drop) SRC=121.43.118.104 Observed=TCP dpt=60331 in=enp0s6 ttl=241 Time=recent( ... show more 🚨 Recon detected (nft drop) SRC=121.43.118.104 Observed=TCP dpt=60331 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 20:06:50 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 139. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 ISPLtd	2026-05-27 09:14:49 (2 weeks ago)	May 27 03:14:47 121.43.118.104 TCP SPT=53286 DPT=51084 SYN May 27 03:14:48 121.43.118.104 TCP SPT=53 ... show more May 27 03:14:47 121.43.118.104 TCP SPT=53286 DPT=51084 SYN May 27 03:14:48 121.43.118.104 TCP SPT=53286 DPT=20296 SYN May 27 03:14:49 121.43.118.104 TCP SPT=53286 DPT=59517 ... show less	Port Scan
🇬🇧 pearbright	2026-05-24 16:10:06 (3 weeks ago)	2026-05-24T16:09:58.178957+00:00 srv1093252 kernel: [384997.575143] [UFW BLOCK] IN=eth0 OUT= MAC=28: ... show more 2026-05-24T16:09:58.178957+00:00 srv1093252 kernel: [384997.575143] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.104 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=26701 PROTO=TCP SPT=58997 DPT=13358 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-24T16:10:00.843740+00:00 srv1093252 kernel: [385000.239502] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.104 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=44336 PROTO=TCP SPT=58997 DPT=57374 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-24T16:10:01.714950+00:00 srv1093252 kernel: [385001.112703] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.104 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=44348 PROTO=TCP SPT=58997 DPT=16727 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-24T16:10:02.951413+00:00 srv1093252 kernel: [385002.348612] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.104 ... show less	Port Scan
🇫🇷 centurion	2026-05-24 06:34:58 (3 weeks ago)	Unauthorized attempt on uptime [41425/tcp] Source port: 44496 TTL: 231 Packet length: 40 TOS: 0x00 h ... show more Unauthorized attempt on uptime [41425/tcp] Source port: 44496 TTL: 231 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ISPLtd	2026-05-24 06:23:39 (3 weeks ago)	May 24 03:23:35 121.43.118.104 TCP SPT=43814 DPT=21156 SYN May 24 03:23:37 121.43.118.104 TCP SPT=43 ... show more May 24 03:23:35 121.43.118.104 TCP SPT=43814 DPT=21156 SYN May 24 03:23:37 121.43.118.104 TCP SPT=43814 DPT=34466 SYN May 24 03:23:39 121.43.118.104 TCP SPT=43814 DPT=31930 ... show less	Port Scan
🇩🇪 acadeova	2026-05-24 02:28:47 (3 weeks ago)	Blocked by UFW on vps2 [61984/tcp] Source port: 49713 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [61984/tcp] Source port: 49713 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.34.74.250

🇺🇸 193.34.74.62

🇨🇦 65.7.106.34

🇨🇳 14.103.127.97

🇺🇸 193.34.73.176

🇺🇸 193.34.72.66

🇺🇸 193.34.72.60

🇺🇸 193.33.237.61

🇺🇸 162.214.99.34

🇮🇩 103.93.162.220

🇫🇷 92.151.58.196

🇱🇹 81.30.98.225

🇷🇴 80.94.92.164

🇺🇸 52.238.199.198

🇸🇬 47.82.8.3

🇺🇸 34.106.226.76

🇮🇷 31.7.66.163

🇺🇸 4.227.178.194

🇪🇸 212.227.230.184

🇺🇸 205.210.31.109