JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.142.161.37

Recent Activity

Abuse confidence score ?

62% Elevated

15 reports

13 reporters · latest 1 day ago

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 121.142.161.37

This IP address has been reported a total of 15 times from 13 distinct sources. 121.142.161.37 was first reported on June 12th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; France with 3 reports; Canada with 1 report. The most common categories in these recent reports were: SSH 8 times; Brute-Force 7 times; Web App Attack 2 times; Hacking 1 time; FTP Brute-Force 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-25 04:30:48 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 bigscoots.com	2026-09-24 11:35:20 (2 days ago)	121.142.161.37 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 121.142.161.37 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 24 06:35:10 10231 sshd[3263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.49.7.116 user=root Sep 24 05:37:56 10231 sshd[1013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.29.140 user=root Sep 24 05:37:58 10231 sshd[1013]: Failed password for root from 192.145.29.140 port 53968 ssh2 Sep 24 05:59:18 10231 sshd[13873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.142.161.37 user=root Sep 24 05:59:20 10231 sshd[13873]: Failed password for root from 121.142.161.37 port 41028 ssh2 IP Addresses Blocked: 196.49.7.116 (RW/Rwanda/-) 192.145.29.140 (FI/Finland/-) show less	Brute-Force SSH
🇺🇸 cwytech	2026-09-22 19:22:52 (3 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-high.	Brute-Force SSH
🇵🇱 lns.bz	2026-09-22 09:17:22 (4 days ago)	SSH bruteforce [BY]	SSH
🇺🇸 anon333	2026-09-19 01:33:24 (1 week ago)	Hacker syslog review 1789781604	Hacking
🇫🇮 vereinshosting	2026-09-18 04:14:22 (1 week ago)	Invalid user operator from 121.142.161.37 port 51190	Brute-Force SSH
Anonymous	2026-09-18 00:29:45 (1 week ago)	SSH brute force attempt. User: ubnt, Pass: [REDACTED]	Brute-Force SSH
🇫🇷 EvoX	2026-09-18 00:01:50 (1 week ago)	🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credential used: user:user • N ... show more 🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credential used: user:user • Number of login attempts: 1 • Client: SSH-2.0-Go show less	SSH
🇫🇷 EvoX	2026-09-17 00:07:45 (1 week ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: admin:admin ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: admin:admin123 • Number of login attempts: 1 • Client: SSH-2.0-Go show less	SSH
🇫🇷 EvoX	2026-09-15 12:03:11 (1 week ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:undefi ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of login attempts: 1 • Client: SSH-2.0-Go • SSH key fingerprints: 71:3a:b0:18:e2:6c:41:18:4e:56:1e:fd:d2:49:97:66 show less	SSH
🇳🇱 stom	2026-09-14 02:11:45 (1 week ago)	2026-09-14T02:11:42.892903 socky.stom66.co.uk proftpd[1269666]: session[1269666] 0.0.0.0 (121.142.16 ... show more 2026-09-14T02:11:42.892903 socky.stom66.co.uk proftpd[1269666]: session[1269666] 0.0.0.0 (121.142.161.37[121.142.161.37]): USER admin: no such user found from 121.142.161.37 [121.142.161.37] to ::ffff:5.79.80.26:2222 ... show less	Brute-Force FTP Brute-Force
🇨🇦 DRI	2026-09-07 07:05:56 (2 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇭 backslash	2026-09-01 18:12:00 (3 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 milcraft.nl	2026-08-24 09:44:55 (1 month ago)	Repeated requests targeting login endpoints, indicating potential brute-force or credential-stuffing ... show more Repeated requests targeting login endpoints, indicating potential brute-force or credential-stuffing attempts. Activity is consistent with brute-force activity. show less	Brute-Force Web App Attack
🇺🇸 helios.live	2026-06-12 00:43:21 (3 months ago)	2026/06/12 00:43:14 [error] 5832#5832: 552258 FastCGI sent in stderr: "Primary script unknown" whil ... show more 2026/06/12 00:43:14 [error] 5832#5832: 552258 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 121.142.161.37, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "https://kocerroxy.com/administrator/" 121.142.161.37 - - [12/Jun/2026:00:43:14 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "https://kocerroxy.com/administrator/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/22B91 Safari/304.1" 2026/06/12 00:43:16 [error] 5832#5832: *552258 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 121.142.161.37, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 121.142.161.37 - ... show less	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.205.90.65

🇦🇷 190.230.38.34

🇵🇭 154.18.197.35

🇮🇳 128.185.33.241

🇭🇰 101.36.116.33

🇮🇷 94.184.42.24

🇮🇹 64.64.108.60

🇺🇸 51.81.110.51

🇮🇳 49.36.9.228

🇰🇷 211.253.31.30

🇳🇱 185.18.236.143

🇦🇷 181.46.66.64

🇳🇱 109.160.32.37

🇱🇹 91.224.92.87

🇺🇸 68.10.53.120

🇱🇹 62.60.130.253

🇵🇾 45.170.130.197

🇺🇸 4.249.18.7

🇺🇸 216.70.97.74

🇧🇷 179.184.218.49