JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.118.130

121.43.118.130 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 54%: ?

54%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.118.130

Whois 121.43.118.130

IP Abuse Reports for 121.43.118.130:

This IP address has been reported a total of 216 times from 66 distinct sources. 121.43.118.130 was first reported on November 18th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 WMK965	2026-07-23 00:45:58 (8 hours ago)	121.43.118.130 - - [23/Jul/2026:08:45:51 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.43.118.13 ... show more 121.43.118.130 - - [23/Jul/2026:08:45:51 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.43.118.130 - - [23/Jul/2026:08:45:51 +0800] "OPTIONS / RTSP/1.0" 400 154 "-" "-" "-" 121.43.118.130 - - [23/Jul/2026:08:45:57 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" show less	Port Scan Web App Attack
🇩🇪 andrepcg	2026-07-18 03:00:03 (5 days ago)	Port scanning (121.43.118.130 -> :8032)	Port Scan Brute-Force
🇺🇸 baltic-lab.com	2026-07-15 05:56:05 (1 week ago)	2026-07-15T07:55:02.405444+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-07-15T07:55:02.405444+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.130 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=18862 PROTO=TCP SPT=54901 DPT=2235 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-15T07:55:02.926180+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.130 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=45220 PROTO=TCP SPT=54901 DPT=11207 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-15T07:55:04.403061+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.130 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=12840 PROTO=TCP SPT=54901 DPT=50036 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-15T07:55:06.555633+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.130 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26355 PROTO=TCP SPT=54901 DPT=3399 WIN ... show less	Brute-Force Hacking
🇩🇪 VentryShield	2026-07-10 17:02:05 (1 week ago)	p0t honeypot: unknown connection on port 6006/tcp, 517 bytes received from client	Port Scan
🇫🇷 Fasetech	2026-07-06 10:45:59 (2 weeks ago)	SecLedge detected suspicious activity. Score: 174.84. Sensor: T-Pot.	Brute-Force
🇫🇷 ISPLtd	2026-07-06 10:32:39 (2 weeks ago)	Jul 6 07:32:36 121.43.118.130 TCP SPT=53955 DPT=8489 SYN Jul 6 07:32:39 121.43.118.130 TCP SPT=539 ... show more Jul 6 07:32:36 121.43.118.130 TCP SPT=53955 DPT=8489 SYN Jul 6 07:32:39 121.43.118.130 TCP SPT=53955 DPT=6803 SYN Jul 6 07:32:39 121.43.118.130 TCP SPT=53955 DPT=11910 ... show less	Port Scan
🇩🇪 VentryShield	2026-07-03 22:48:44 (2 weeks ago)	p0t honeypot: unknown connection on port 3006/tcp, 517 bytes received from client	Port Scan
🇩🇪 becker-software.de	2026-07-01 02:59:17 (3 weeks ago)	2026-07-01T02:58:16.103444+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02 ... show more 2026-07-01T02:58:16.103444+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:08:00 SRC=121.43.118.130 DST=77.90.16.3 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=47514 PROTO=TCP SPT=54660 DPT=9102 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T02:58:16.627484+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:08:00 SRC=121.43.118.130 DST=77.90.16.3 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=41557 PROTO=TCP SPT=54660 DPT=9346 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T02:58:17.154349+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:08:00 SRC=121.43.118.130 DST=77.90.16.3 LEN=40 TOS=0x00 PREC=0x00 TTL=226 ID=9488 PROTO=TCP SPT=54660 DPT=10111 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T02:58:17.422760+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:98:5d:82:29:8f:43:08:00 SRC=121.43.118.130 DST=77.90.16.3 LEN=40 TOS=0x00 PREC=0x00 TTL=226 ID= ... show less	Port Scan
Anonymous	2026-06-25 20:57:58 (3 weeks ago)	2026-06-25T20:57:37.988759+00:00 HongKong1 sshd-session[3569531]: Connection closed by 121.43.118.13 ... show more 2026-06-25T20:57:37.988759+00:00 HongKong1 sshd-session[3569531]: Connection closed by 121.43.118.130 port 42390 [preauth] 2026-06-25T20:57:58.206586+00:00 HongKong1 sshd-session[3570687]: Connection closed by 121.43.118.130 port 42892 [preauth] ... show less	Brute-Force SSH
🇨🇳 pengpeng	2026-06-25 20:41:22 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 139 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 PeravixGroup	2026-06-16 01:37:55 (1 month ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇫🇷 security.rdmc.fr	2026-06-15 23:01:45 (1 month ago)	Port Scan Attack proto:TCP src:44055 dst:119	Port Scan
🇭🇰 sandra361	2026-06-15 16:06:21 (1 month ago)	Port scan detected: 19 attempts across 1 ports (10350). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=121.4 ... show more Port scan detected: 19 attempts across 1 ports (10350). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=121.43.118.130 LEN=60 TOS=0x14 PREC=0x00 TTL=49 ID=7168 DF PROTO=TCP SPT=41618 DPT=10350 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇭🇰 www.winos.me	2026-06-13 10:13:05 (1 month ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 Starburst SysOp Team	2026-06-13 04:09:43 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-5)	Hacking Bad Web Bot

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.94

🇬🇧 194.50.235.153

🇮🇳 182.18.139.237

🇷🇸 178.220.151.26

🇺🇸 162.217.100.41

🇮🇩 149.129.218.63

🇮🇳 103.179.171.33

🇮🇶 93.180.222.47

🇸🇬 47.236.189.95

🇻🇪 46.29.29.113

🇸🇬 43.134.93.164

🇲🇽 38.58.66.244

🇨🇳 14.103.112.35

🇮🇳 218.248.19.102

🇪🇬 197.58.61.11

🇩🇪 195.182.16.23

🇵🇾 181.126.177.164

🇺🇸 172.190.100.10

🇺🇸 165.22.130.106

🇺🇸 162.216.149.133