JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.43.118.194

Recent Activity

Abuse confidence score ?

97% Critical

279 reports

95 reporters · latest 16 hours ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 121.43.118.194

Export CSV

This IP address has been reported a total of 279 times from 95 distinct sources. 121.43.118.194 was first reported on March 1st 2025, and the most recent report was 16 hours ago. In the last 60 days, the top reporter locations were: Turkey with 29 reports; United States of America with 10 reports; Germany with 8 reports. The most common categories in these recent reports were: Hacking 32 times; Web App Attack 30 times; Port Scan 30 times; Brute-Force 9 times; SSH 4 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 AmStaff	2026-10-05 13:03:12 (16 hours ago)	Honeypot: 86 connection attempts (port scan). Targeted ports: 2251, 2480, 5211, 9326, 15889, 33280.	Port Scan
🇭🇰 鹏鹏	2026-10-05 07:13:22 (22 hours ago)	monitor: on ser162528253480 \| port: 50410 \| ttl: 237 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 50410 \| ttl: 237 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 rh24	2026-10-05 05:24:59 (1 day ago)	Port Scan detected from 121.43.118.194 (CN/China/-).	Port Scan
🇩🇰 SaltySoftworks	2026-10-03 11:18:39 (2 days ago)	2026-10-03T11:18:32.126400+00:00 kernel: TCP Attack: SRC=121.43.118.194 DST=[Masked] LEN=40 TOS=0x0 ... show more 2026-10-03T11:18:32.126400+00:00 kernel: TCP Attack: SRC=121.43.118.194 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=235 PROTO=TCP SPT=46311 DPT=47434 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇩🇪 marcel-knorr.de	2026-10-03 02:15:08 (3 days ago)	[easydock-cluster-rebuild] Blocked by UFW	Port Scan
🇹🇷 neron	2026-10-02 10:06:42 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-10-01 10:06:38 (4 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 pearbright	2026-10-01 02:53:14 (5 days ago)	2026-10-01T02:53:08.526916+00:00 srv1093252 kernel: [3638843.928747] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-10-01T02:53:08.526916+00:00 srv1093252 kernel: [3638843.928747] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=22058 PROTO=TCP SPT=43186 DPT=37792 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T02:53:08.915354+00:00 srv1093252 kernel: [3638844.312562] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=48693 PROTO=TCP SPT=43186 DPT=65436 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T02:53:09.645241+00:00 srv1093252 kernel: [3638845.047640] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=20825 PROTO=TCP SPT=43186 DPT=1928 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T02:53:10.144876+00:00 srv1093252 kernel: [3638845.547463] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118. ... show less	Port Scan
🇩🇪 psauxit	2026-10-01 01:31:11 (5 days ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇺🇸 sandra361	2026-09-30 19:00:50 (5 days ago)	Port scan detected: 41 attempts across 41 ports (2066, 3289, 4138, 7632, 9837, ..., 61691, 64269, 64 ... show more Port scan detected: 41 attempts across 41 ports (2066, 3289, 4138, 7632, 9837, ..., 61691, 64269, 64844). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=121.43.118.194 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=55680 PROTO=TCP SPT=54818 DPT=54742 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 xavier-momain.eu	2026-09-30 15:33:44 (5 days ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH
🇹🇷 neron	2026-09-30 10:06:38 (5 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 pearbright	2026-09-29 06:39:57 (6 days ago)	2026-09-29T06:37:59.199934+00:00 srv740043 kernel: [11401449.728305] [UFW BLOCK] IN=eth0 OUT= MAC=bc ... show more 2026-09-29T06:37:59.199934+00:00 srv740043 kernel: [11401449.728305] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=54812 PROTO=TCP SPT=43877 DPT=19273 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-29T06:37:59.200238+00:00 srv740043 kernel: [11401449.728987] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=56043 PROTO=TCP SPT=43877 DPT=4845 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-29T06:37:59.450972+00:00 srv740043 kernel: [11401449.981858] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=121.43.118.194 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=11846 PROTO=TCP SPT=43877 DPT=44054 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-29T06:38:03.614118+00:00 srv740043 kernel: [11401454.144079] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=121.43.1 ... show less	Port Scan
🇩🇪 xavier-momain.eu	2026-09-28 14:32:11 (1 week ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇹🇷 neron	2026-09-28 07:51:38 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 279 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.165.159.30

🇮🇷 152.89.12.101

🇺🇸 97.107.139.94

🇷🇺 85.95.183.45

🇳🇱 77.91.71.91

🇷🇴 2.57.122.238

🇧🇷 2804:1b3:a3c1:1d2:e54f:13d1:6dd4:1815

🇦🇪 213.42.31.237

🇰🇪 197.248.169.61

🇷🇼 197.243.14.52

🇦🇷 190.220.9.250

🇧🇷 189.29.144.72

🇺🇸 162.216.150.234

🇨🇳 58.45.247.90

🇧🇬 46.10.201.90

🇮🇳 27.123.114.190

🇧🇷 191.10.235.231

🇧🇷 177.16.13.55

🇨🇩 102.223.209.43

🇨🇦 85.217.149.55