JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.118.248

121.43.118.248 was found in our database!

This IP was reported 176 times. Confidence of Abuse is 58%: ?

58%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.118.248

Whois 121.43.118.248

IP Abuse Reports for 121.43.118.248:

This IP address has been reported a total of 176 times from 57 distinct sources. 121.43.118.248 was first reported on March 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2026-06-10 08:42:12 (2 days ago)	Jun 10 02:41:59 121.43.118.248 TCP SPT=40918 DPT=52987 SYN Jun 10 02:42:08 121.43.118.248 TCP SPT=40 ... show more Jun 10 02:41:59 121.43.118.248 TCP SPT=40918 DPT=52987 SYN Jun 10 02:42:08 121.43.118.248 TCP SPT=40918 DPT=3622 SYN Jun 10 02:42:11 121.43.118.248 TCP SPT=40918 DPT=33554 ... show less	Port Scan
🇮🇱 spd.co.il	2026-06-08 19:01:19 (3 days ago)	Port scan detected on multiple ports	Port Scan
🇨🇳 pengpeng	2026-06-05 04:50:59 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 8853 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 PeravixGroup	2026-06-03 00:52:46 (1 week ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇨🇳 pengpeng	2026-06-01 20:53:50 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 58082 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 58082 \| ttl: 242 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-05-27 06:53:59 (2 weeks ago)	SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=39976 SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=33 ... show more SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=39976 SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=33610 SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=58311 SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=45522 SRC=121.43.118.248, PROTO=TCP, SPT=44829, DPT=47933 show less	Port Scan
🇫🇷 ISPLtd	2026-05-26 10:00:56 (2 weeks ago)	May 26 07:00:51 121.43.118.248 TCP SPT=49647 DPT=42865 SYN May 26 07:00:51 121.43.118.248 TCP SPT=49 ... show more May 26 07:00:51 121.43.118.248 TCP SPT=49647 DPT=42865 SYN May 26 07:00:51 121.43.118.248 TCP SPT=49647 DPT=43725 SYN May 26 07:00:55 121.43.118.248 TCP SPT=49647 DPT=52403 ... show less	Port Scan
Anonymous	2026-05-24 09:08:53 (2 weeks ago)	Blocked by UFW (TCP on 26719) Source port: 53732 TTL: 246 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 26719) Source port: 53732 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 121.43.118.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 17:39:24 (2 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 Fasetech	2026-05-22 12:28:31 (3 weeks ago)	SecLedge detected suspicious activity. Score: 144.6. Sensor: T-Pot.	Brute-Force
🇩🇪 acadeova	2026-05-22 00:16:46 (3 weeks ago)	Blocked by UFW on vps2 [50050/tcp] Source port: 48959 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [50050/tcp] Source port: 48959 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 acadeova	2026-05-21 16:56:25 (3 weeks ago)	🚨 Recon detected (nft drop) SRC=121.43.118.248 Observed=TCP dpt=37320 in=enp0s6 ttl=241 Time=recent( ... show more 🚨 Recon detected (nft drop) SRC=121.43.118.248 Observed=TCP dpt=37320 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇬🇧 pearbright	2026-05-18 14:53:28 (3 weeks ago)	2026-05-18T14:51:18.647955+00:00 srv1093252 kernel: [1531382.906454] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-05-18T14:51:18.647955+00:00 srv1093252 kernel: [1531382.906454] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.248 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=15855 PROTO=TCP SPT=55877 DPT=46016 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T14:51:19.416571+00:00 srv1093252 kernel: [1531383.675261] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.248 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=62516 PROTO=TCP SPT=55877 DPT=61701 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T14:51:21.505140+00:00 srv1093252 kernel: [1531385.763343] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118.248 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=13718 PROTO=TCP SPT=55877 DPT=61252 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T14:51:21.510038+00:00 srv1093252 kernel: [1531385.768589] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.118 ... show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 22:34:32 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.43.118.248 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/121.43.118.248 2026-05-17 02:41:19 /favicon.ico 2026-05-17 12:10:06 / 2026-05-17 12:10:06 /favicon.ico 2026-05-17 02:41:19 / show less	Web App Attack
🇫🇷 Fasetech	2026-05-11 03:58:07 (1 month ago)	SecLedge detected suspicious activity. Score: 144.6. Sensor: T-Pot.	Brute-Force

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.231

🇷🇴 80.94.92.186

🇰🇷 211.42.175.13

🇲🇾 154.89.153.73

🇨🇳 121.15.140.235

🇮🇳 115.187.39.134

🇰🇷 59.24.133.197

🇪🇨 45.224.97.241

🇧🇷 45.39.35.223

🇨🇳 27.17.204.111

🇨🇴 200.189.27.76

🇳🇱 195.178.110.26

🇳🇱 185.213.175.168

🇰🇷 152.32.139.190

🇸🇪 138.124.29.146

🇨🇳 112.31.109.13

🇮🇩 103.154.231.122

🇩🇪 94.31.111.143

🇨🇳 58.52.85.146

🇨🇳 171.37.190.162