JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.118.253

121.43.118.253 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 57%: ?

57%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.118.253

Whois 121.43.118.253

IP Abuse Reports for 121.43.118.253:

This IP address has been reported a total of 207 times from 62 distinct sources. 121.43.118.253 was first reported on March 19th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 PP-VTNK	2026-07-03 09:58:23 (3 days ago)	2026-07-03T12:58:22.134281+03:00 vatnik sshd[170200]: error: kex_exchange_identification: Connection ... show more 2026-07-03T12:58:22.134281+03:00 vatnik sshd[170200]: error: kex_exchange_identification: Connection closed by remote host 2026-07-03T12:58:22.134352+03:00 vatnik sshd[170200]: Connection closed by 121.43.118.253 port 37492 ... show less	Hacking Brute-Force SSH
🇩🇪 Honeypot-EU-Fru	2026-07-03 05:05:44 (3 days ago)	1783055142 - 07/03/2026 07:05:42 Host: 121.43.118.253/121.43.118.253 Port: 82 TCP Blocked ...	Port Scan
🇨🇳 WMK965	2026-07-03 02:18:25 (3 days ago)	121.43.118.253 - - [03/Jul/2026:10:18:24 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.43.118.25 ... show more 121.43.118.253 - - [03/Jul/2026:10:18:24 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 121.43.118.253 - - [03/Jul/2026:10:18:24 +0800] "GET /temp%20files%2C/Def%61ult.txt%2etxt HTTP/1.0" 444 0 "-" "-" "-" 121.43.118.253 - - [03/Jul/2026:10:18:24 +0800] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
Anonymous	2026-06-30 22:30:39 (5 days ago)	Blocked by UFW (UDP on 1701) Source port: 46669 TTL: 55 Packet length: 58 38 TOS: 0x14 This report ... show more Blocked by UFW (UDP on 1701) Source port: 46669 TTL: 55 Packet length: 58 38 TOS: 0x14 This report (for 121.43.118.253) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ras07	2026-06-26 07:00:08 (1 week ago)	Brute force SSH login attempts.	Brute-Force SSH
🇨🇳 Peter Yu	2026-06-20 12:26:13 (2 weeks ago)		Bad Web Bot Web App Attack
🇺🇸 baltic-lab.com	2026-06-19 02:56:27 (2 weeks ago)	2026-06-19T04:54:05.407451+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-19T04:54:05.407451+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.253 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=24892 PROTO=TCP SPT=57615 DPT=28018 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T04:54:26.100636+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.253 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=10963 PROTO=TCP SPT=57615 DPT=11521 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T04:55:06.035401+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.253 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=11170 PROTO=TCP SPT=57615 DPT=4430 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T04:55:12.276580+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=121.43.118.253 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=8740 PROTO=TCP SPT=57615 DPT=8055 WIND ... show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-10 08:50:51 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇳🇱 SysAdmin Dylan	2026-06-09 06:40:43 (3 weeks ago)	Port Scan detected from 121.43.118.253 (CN/China/-). 11 hits in the last 231 seconds	Brute-Force
Anonymous	2026-06-08 07:56:28 (4 weeks ago)	Port Scan detected from 121.43.118.253 (CN/China/-). 16 hits in the last 80 seconds	Web App Attack
🇪🇸 gnom4ik	2026-06-07 09:56:44 (4 weeks ago)	ban-reviewer auto report; ip=121.43.118.253; scenario=ssh:bruteforce; verdict=valid_ban; confidence= ... show more ban-reviewer auto report; ip=121.43.118.253; scenario=ssh:bruteforce; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-01 05:40:06 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-29 10:46:53 (1 month ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇺🇸 Starburst SysOp Team	2026-05-28 19:47:31 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
Anonymous	2026-05-24 01:26:31 (1 month ago)	Blocked by UFW (TCP on 27237) Source port: 45982 TTL: 246 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 27237) Source port: 45982 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 121.43.118.253) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.141

🇧🇷 177.124.95.55

🇨🇳 112.86.12.80

🇮🇳 103.55.105.232

🇷🇴 92.118.39.71

🇳🇱 45.156.87.253

🇷🇺 37.110.113.113

🇹🇼 35.234.37.132

🇬🇧 35.203.210.164

🇧🇪 34.14.122.221

🇺🇸 185.61.223.19

🇰🇿 178.91.82.22

🇺🇸 162.216.149.178

🇳🇱 159.183.43.226

🇩🇪 141.11.107.4

🇨🇳 114.67.127.241

🇸🇮 102.220.160.47

🇬🇧 35.203.211.189

🇸🇮 31.57.184.20

🇨🇳 223.247.47.1