JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.43.53.226

121.43.53.226 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 59%: ?

59%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.43.53.226

Whois 121.43.53.226

IP Abuse Reports for 121.43.53.226:

This IP address has been reported a total of 43 times from 17 distinct sources. 121.43.53.226 was first reported on April 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-17 21:20:59 (1 day ago)	Port Scan detected from 121.43.53.226 (CN/China/-). 11 hits in the last 100 seconds (0-135)	Port Scan
🇩🇪 acadeova	2026-07-15 06:45:08 (4 days ago)	🚨 Recon detected (nft drop) SRC=121.43.53.226 Observed=TCP dpt=30868 in=enp0s6 ttl=241 Time=recent(j ... show more 🚨 Recon detected (nft drop) SRC=121.43.53.226 Observed=TCP dpt=30868 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇩🇪 baltic-lab.com	2026-07-14 23:16:46 (4 days ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
Anonymous	2026-07-10 10:00:36 (1 week ago)	Shorewall log file match.	Port Scan
🇬🇧 pearbright	2026-07-09 15:19:49 (1 week ago)	2026-07-09T15:19:29.138677+00:00 srv1093252 kernel: [4356342.479598] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-09T15:19:29.138677+00:00 srv1093252 kernel: [4356342.479598] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=21670 PROTO=TCP SPT=50367 DPT=1323 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:29.642680+00:00 srv1093252 kernel: [4356342.983446] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=11234 PROTO=TCP SPT=50367 DPT=50108 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:30.085349+00:00 srv1093252 kernel: [4356343.426412] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 DST=72.61.19.109 LEN=40 TOS=0x08 PREC=0x20 TTL=226 ID=4952 PROTO=TCP SPT=50367 DPT=30921 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-09T15:19:31.512374+00:00 srv1093252 kernel: [4356344.853452] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=121.43.53.226 D ... show less	Port Scan
🇦🇺 FEWA	2026-07-08 13:08:03 (1 week ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇫🇷 ISPLtd	2026-07-02 10:56:44 (2 weeks ago)	Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=30937 SYN Jul 2 07:56:40 121.43.53.226 TCP SPT=4979 ... show more Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=30937 SYN Jul 2 07:56:40 121.43.53.226 TCP SPT=49798 DPT=3724 SYN Jul 2 07:56:42 121.43.53.226 TCP SPT=49798 DPT=8281 ... show less	Port Scan
🇺🇸 chronos	2026-06-29 06:51:07 (2 weeks ago)	[AUTORAVALT][[29/06/2026 - 03:51:06 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[29/06/2026 - 03:51:06 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-29 06:20:22 (2 weeks ago)	[AUTORAVALT][[29/06/2026 - 03:20:21 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[29/06/2026 - 03:20:21 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-06-26 09:32:25 (3 weeks ago)	[AUTORAVALT][[26/06/2026 - 06:32:25 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0 ... show more [AUTORAVALT][[26/06/2026 - 06:32:25 -03:00 UTC] Attack from [Li Jia] [121.43.53.226]-[RANGE:121.40.0.0 - 121.43.255.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇬🇧 PeravixGroup	2026-06-26 00:22:31 (3 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇰🇷 doll.gl	2026-06-19 16:30:54 (4 weeks ago)	CrowdSec: Ip 121.43.53.226 performed 'crowdsecurity/http-bad-user-agent' (2 events over 680.849µs) a ... show more CrowdSec: Ip 121.43.53.226 performed 'crowdsecurity/http-bad-user-agent' (2 events over 680.849µs) at 2026-06-19 16:30:52.699224458 +0000 UTC (scenario: crowdsecurity/http-bad-user-agent) show less	Bad Web Bot
🇫🇷 Little Iguana	2026-06-13 00:50:53 (1 month ago)	trying to access non-authorized port	Port Scan
🇬🇧 Hobby Bob	2026-06-12 10:50:25 (1 month ago)	Jun 12 11:50:25 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 sec ... show more Jun 12 11:50:25 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=121.43.53.226, lip=X.X.X.X session= show less	Port Scan Hacking
🇦🇺 dyln	2026-06-12 10:28:05 (1 month ago)	Dyls honeypot brute-force: proto8 (7 total hits)	Brute-Force

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 188.148.160.41

🇵🇱 176.53.159.198

🇺🇸 13.89.125.230

🇩🇪 178.211.155.91

🇺🇸 159.223.159.88

🇭🇰 150.5.169.176

🇭🇰 91.208.73.57

🇰🇷 220.88.220.59

🇳🇴 217.170.194.91

🇰🇷 211.106.137.135

🇵🇱 185.201.114.219

🇺🇸 173.255.210.89

🇸🇬 136.110.62.97

🇺🇸 64.23.138.212

🇺🇸 38.104.103.255

🇷🇺 37.46.135.119

🇵🇰 36.255.33.156

🇺🇸 20.64.234.8

🇸🇬 2a04:4e40:1700:0:c03:5a9f:e740:45ad

🇳🇱 195.178.110.102