JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.53.226

121.43.53.226 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 59%: ?

59%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.53.226

Whois 121.43.53.226

IP Abuse Reports for 121.43.53.226:

This IP address has been reported a total of 43 times from 17 distinct sources. 121.43.53.226 was first reported on April 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-17 21:20:59 (1 day ago)	Port Scan detected from 121.43.53.226 (CN/China/-). 11 hits in the last 100 seconds (0-135)	Port Scan
🇩🇪 acadeova	2026-07-15 06:45:08 (3 days ago)	🚨 Recon detected (nft drop) SRC=121.43.53.226 Observed=TCP dpt=30868 in=enp0s6 ttl=241 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=121.43.53.226 Observed=TCP dpt=30868 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇩🇪 baltic-lab.com	2026-07-14 23:16:46 (4 days ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
Anonymous	2026-07-10 10:00:36 (1 week ago)	Shorewall log file match.	Port Scan
🇬🇧 pearbright	2026-07-09 15:19:49 (1 week ago)	2026-07-09T15:19:29.138677+00:00 srv1093252 kernel: [4356342.479598] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-09T15:19:29.138677+00:00 srv1093252 kernel: [4356342.479598] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=21670 PROTO=TCP SPT=50367 DPT=1323 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:29.642680+00:00 srv1093252 kernel: [4356342.983446] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=11234 PROTO=TCP SPT=50367 DPT=50108 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:30.085349+00:00 srv1093252 kernel: [4356343.426412] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=4952 PROTO=TCP SPT=50367 DPT=30921 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:31.512374+00:00 srv1093252 kernel: [4356344.853452] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 D ... show less	Port Scan
🇦🇺 FEWA	2026-07-08 13:08:03 (1 week ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇫🇷 ISPLtd	2026-07-02 10:56:44 (2 weeks ago)	Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=30937 SYN Jul 2 07:56:40 121.43.53.226 TCP SPT=4979 ... show more Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=30937 SYN Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=3724 SYN Jul 2 07:56:42 121.43.53.226 TCP SPT=49798 DPT=8281 ... show less	Port Scan
🇺🇸 chronos	2026-06-29 06:51:07 (2 weeks ago)	[AUTORAVALT][[29/06/2026 - 03:51:06 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[29/06/2026 - 03:51:06 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-29 06:20:22 (2 weeks ago)	[AUTORAVALT][[29/06/2026 - 03:20:21 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[29/06/2026 - 03:20:21 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-26 09:32:25 (3 weeks ago)	[AUTORAVALT][[26/06/2026 - 06:32:25 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[26/06/2026 - 06:32:25 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇬🇧 PeravixGroup	2026-06-26 00:22:31 (3 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇰🇷 doll.gl	2026-06-19 16:30:54 (4 weeks ago)	CrowdSec: Ip 121.43.53.226 performed 'crowdsecurity/http-bad-user-agent' (2 events over 680.849µs) a ... show more CrowdSec: Ip 121.43.53.226 performed 'crowdsecurity/http-bad-user-agent' (2 events over 680.849µs) at 2026-06-19 16:30:52.699224458 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent) show less	Bad Web Bot
🇫🇷 Little Iguana	2026-06-13 00:50:53 (1 month ago)	trying to access non-authorized port	Port Scan
🇬🇧 Hobby Bob	2026-06-12 10:50:25 (1 month ago)	Jun 12 11:50:25 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 sec ... show more Jun 12 11:50:25 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=121.43.53.226, lip=X.X.X.X session= show less	Port Scan Hacking
🇦🇺 dyln	2026-06-12 10:28:05 (1 month ago)	Dyls honeypot brute-force: proto8 (7 total hits)	Brute-Force

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4023:1801::12e

🇳🇱 185.242.226.11

🇮🇳 103.88.76.27

🇳🇱 45.148.10.152

🇺🇸 152.32.235.36

🇩🇪 140.248.75.83

🇨🇳 123.119.78.227

🇨🇳 106.117.106.82

🇨🇳 106.75.222.86

🇺🇸 57.141.0.71

🇺🇸 45.45.237.192

🇧🇪 198.235.24.184

🇲🇽 195.250.27.224

🇮🇩 163.7.9.84

🇨🇳 115.190.161.159

🇨🇦 57.134.136.41

🇫🇮 2a00:1450:4010:c0a::122

🇲🇺 197.227.8.186

🇧🇷 186.194.27.7

🇮🇩 163.7.5.228