JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.143.202.57

121.143.202.57 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.143.202.57

Whois 121.143.202.57

IP Abuse Reports for 121.143.202.57:

This IP address has been reported a total of 29 times from 16 distinct sources. 121.143.202.57 was first reported on October 3rd 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Bytemark	2025-11-17 15:55:40 (6 months ago)	Nov 17 15:55:38 dlcentre3 postfix/smtpd[32764]: NOQUEUE: reject: RCPT from unknown[121.143.202.57]: ... show more Nov 17 15:55:38 dlcentre3 postfix/smtpd[32764]: NOQUEUE: reject: RCPT from unknown[121.143.202.57]: 554 5.7.1 Service unavailable; Client host [121.143.202.57] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/121.143.202.57; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<lv.ma> show less	Email Spam Spoofing Brute-Force Exploited Host
🇩🇪 stinpriza	2025-11-12 20:43:29 (6 months ago)	Web App Attack	Web App Attack
🇳🇿 Tripwire	2025-11-08 17:35:57 (6 months ago)	Wordpress login scanning	Brute-Force Web App Attack
🇺🇸 Rip	2025-11-08 15:16:06 (6 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-07 12:30:45 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 07:30:39.214137 2025] [security2:error] [pid 7426:tid 7426] [client 121.143.202.57:41925] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|saadeh.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saadeh.ws"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ3mb9IJCjtoGWvIPNAg3QAAAAg"], referer: https://saadeh.ws/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2025-11-07 06:39:25 (6 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN KR/South Korea/-	Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-11-03 00:02:03 (7 months ago)	Spam	Email Spam
🇲🇾 syokadmin	2025-11-01 02:12:06 (7 months ago)	(PERMBLOCK) 121.143.202.57 (KR/South Korea/-) has had more than 2 temp blocks in the last 86400 secs	Brute-Force
🇺🇸 technash	2025-10-31 14:39:00 (7 months ago)	Brute-force login attempts to MSFT accounts at office.com.	Brute-Force Web App Attack
🇲🇾 syokadmin	2025-10-31 10:44:29 (7 months ago)	121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] i ... show more 121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-30 15:12:21 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 11:12:12.778993 2025] [security2:error] [pid 13407:tid 13407] [client 121.143.202.57:60261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|interiorsolutions-stuart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQOATH8MCY9ucNcP_H4GfwAAAAM"], referer: https://interiorsolutions-stuart.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-10-29 17:55:40 (7 months ago)	121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] i ... show more 121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-28 09:32:57 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 121.143.202.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 05:32:50.436880 2025] [security2:error] [pid 26525:tid 26525] [client 121.143.202.57:60337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|realclean.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realclean.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQCNwmtJLk567OSN3bY3NQAAAAQ"], referer: https://realclean.net/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-10-28 03:14:30 (7 months ago)	121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] i ... show more 121.143.202.57 (KR/South Korea/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇳🇱 maxxsense	2025-10-26 12:39:41 (7 months ago)	(wordpress) Failed wordpress login from 121.143.202.57 (KR/South Korea/-)	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.48.122

🇮🇳 182.95.40.26

🇪🇪 83.166.50.15

🇺🇸 67.207.84.8

🇺🇦 45.11.57.172

🇺🇸 216.194.172.68

🇳🇱 212.30.37.18

🇸🇬 202.70.132.184

🇦🇹 194.182.174.160

🇺🇸 193.239.237.77

🇿🇦 165.73.182.185

🇳🇵 157.119.70.200

🇫🇮 147.185.133.128

🇺🇦 95.158.38.108

🇩🇪 69.5.169.78

🇺🇸 65.27.160.245

🇸🇬 43.172.198.110

🇹🇳 196.203.231.220

🇮🇳 182.95.185.142

🇮🇳 152.59.80.161