JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.128.121.134

121.128.121.134 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.128.121.134

Whois 121.128.121.134

IP Abuse Reports for 121.128.121.134:

This IP address has been reported a total of 7 times from 6 distinct sources. 121.128.121.134 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇱 cheatmaster.store	2026-02-27 02:05:48 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇩🇪 kranem	2026-02-26 21:00:26 (3 months ago)	Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 4766 (KIXS-AS-KR Korea Telecom) Protocol: ... show more Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 4766 (KIXS-AS-KR Korea Telecom) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-02-26T19:58:51Z User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_16_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-26 16:32:26 (3 months ago)	(mod_security) mod_security (id:217200) triggered by 121.128.121.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217200) triggered by 121.128.121.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 11:32:18.454451 2026] [security2:error] [pid 8447:tid 8447] [client 121.128.121.134:58371] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|www.cms2020.com\|F\|2"] [data "/home/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cms2020.com"] [uri "/home/"] [unique_id "aaB1kirDVz1rjwO85coELQAAACA"], referer: https://www.cms2020.com/home/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-02-26 04:25:03 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 cheatmaster.store	2026-02-25 10:20:40 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 windowsforum	2026-02-25 04:39:36 (3 months ago)	Spam bot registration: triggers=js_challenge, inv_honeypot, pow_fail, username=LowellHild	Web Spam Bad Web Bot
🇨🇦 1gz	2026-02-20 13:06:54 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.114

🇩🇪 69.5.169.55

🇩🇪 69.5.169.21

🇺🇸 23.239.4.211

🇺🇸 2600:1f16:743:ac02:b018:3ff7:1004:b090

🇺🇸 206.251.29.224

🇧🇪 198.235.24.202

🇬🇧 193.163.125.112

🇬🇧 193.32.209.242

🇨🇦 159.89.124.112

🇺🇸 147.182.247.10

🇺🇸 73.86.25.51

🇩🇪 69.5.169.165

🇩🇪 69.5.169.148

🇫🇷 51.68.34.131

🇺🇦 45.129.98.227

🇺🇸 24.163.114.60

🇺🇸 13.86.117.6

🇳🇱 5.187.35.142

🇨🇳 218.3.255.164