JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.128.121.54

121.128.121.54 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.128.121.54

Whois 121.128.121.54

IP Abuse Reports for 121.128.121.54:

This IP address has been reported a total of 8 times from 8 distinct sources. 121.128.121.54 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-03-09 07:40:06 (3 months ago)	121.128.121.54 - - [09/Mar/2026:09:40:05 +0200] "GET /wp-json/wp/v2/posts HTTP/1.1" 401 115 "-" "Moz ... show more 121.128.121.54 - - [09/Mar/2026:09:40:05 +0200] "GET /wp-json/wp/v2/posts HTTP/1.1" 401 115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-03-09 02:32:29 (3 months ago)	CloudFlare WAF REPORT: /wp-login.php	Bad Web Bot Web App Attack
🇮🇳 Bharat Datacenter	2026-03-05 11:22:44 (3 months ago)	5: date=2026-03-05 time=16:49:40 eventtime=1772709580552500920 tz="+0530" logid="0720018432" type="u ... show more 5: date=2026-03-05 time=16:49:40 eventtime=1772709580552500920 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=121.128.121.54 srccountry="Korea, Republic of" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=180387 attack="tcp_syn_flood" srcport=48103 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 6453 > threshold 2000, repeats 180387 times since last log, pps 6517 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇺🇸 Starburst SysOp Team	2026-03-02 07:10:50 (3 months ago)	Malware host detected by rbl.malware.expert. RBL lookup of 54.121.128.121.rbl.malware.expert succeed ... show more Malware host detected by rbl.malware.expert. RBL lookup of 54.121.128.121.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1) show less	Hacking
🇩🇪 kranem	2026-02-26 21:06:14 (3 months ago)	Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 4766 (KIXS-AS-KR Korea Telecom) Protocol: ... show more Triggered Cloudflare WAF from KR. Action taken: BLOCK ASN: 4766 (KIXS-AS-KR Korea Telecom) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-02-26T19:49:42Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 cheatmaster.store	2026-02-26 06:15:13 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇵🇱 IROK	2026-02-25 08:12:17 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇨🇦 1gz	2026-02-20 13:05:19 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇨🇳 58.242.190.39

🇺🇸 208.109.52.213

🇺🇸 173.239.240.166

🇺🇸 147.185.132.59

🇸🇬 114.119.139.59

🇺🇸 98.80.4.15

🇹🇭 83.118.107.46

🇺🇸 34.106.121.226

🇵🇰 223.123.111.91

🇩🇪 207.154.230.149

🇮🇳 122.185.146.106

🇷🇺 83.239.84.130

🇬🇧 35.203.210.141

🇫🇷 2001:41d0:a:5753::

🇺🇸 154.53.49.68

🇮🇩 43.133.139.6

🇺🇸 20.168.127.155

🇨🇴 2800:1e0:d40:1:9999::199

🇻🇳 103.197.184.29