JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.151.47.26

Activity Trending Down

Abuse Confidence Score

25% Elevated

17 reports

15 reporters · latest 1 week ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Daegu, Daegu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

17 from 15 distinct reporters

First reported

July 13th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇨🇦 Canada 1 🇯🇵 Japan 1

Most common categories Brute-Force 7 SSH 4 Web App Attack 2 Bad Web Bot 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ChonkyHamster	2026-11-03 18:52:51 UTC · (1 week ago)	SSH honeypot: 1 login attempt, 2026-11-03 18:52 to 18:52 UTC; usernames tried include Admin; client SSH-2.0-Go (fingerprint seen from 112 attacking IPs this week).	Brute-Force SSH
Anonymous	2026-10-16 04:30:10 UTC · (3 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 Phil Schuyler	2026-10-08 00:00:00 UTC · (1 month ago)	SSH brute-force attempt on a Cowrie honeypot on TCP/2222.	Brute-Force SSH
🇺🇸 anon333	2026-09-29 01:33:21 UTC · (1 month ago)	Hacker syslog review 1790645601	Hacking
🇳🇱 Kolo	2026-09-28 09:54:46 UTC · (1 month ago)	WhoTouchedMySSH honeypot SSH bruteforce from 121.151.47.26 (Daegu, KR)	Brute-Force SSH
🇨🇦 DRI	2026-09-24 14:23:29 UTC · (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 04:51:39 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 121.151.47.26 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:51:32.058458 2026] [security2:error] [pid 4068:tid 4068] [client 121.151.47.26:58472] Mod ... show more (mod_security) mod_security (id:210730) triggered by 121.151.47.26 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:51:32.058458 2026] [security2:error] [pid 4068:tid 4068] [client 121.151.47.26:58472] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aqzDVKbAwF5cMvs2mc8orgAAAAM"], referer: http://gamepart.com/home/tancedi1/gamepart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-09-16 21:15:05 UTC · (1 month ago)	Threat.live: Brute Force	Brute-Force
🇺🇸 bigscoots.com	2026-09-14 01:56:09 UTC · (1 month ago)	121.151.47.26 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 13 20:30:59 12525 sshd[32213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 121.151.47.26 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 13 20:30:59 12525 sshd[32213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.151.47.26 user=root Sep 13 20:31:01 12525 sshd[32213]: Failed password for root from 121.151.47.26 port 54022 ssh2 Sep 13 20:00:06 12525 sshd[16241]: Failed password for root from 20.184.59.236 port 39858 ssh2 Sep 13 20:00:04 12525 sshd[16241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.184.59.236 user=root Sep 13 20:55:56 12525 sshd[12872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.177.162.42 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-12 05:50:33 UTC · (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇦 DRI	2026-09-09 00:18:49 UTC · (2 months ago)	Web attack/Malicious activity detected	Web App Attack
🇫🇷 Lat31320	2026-09-06 21:37:45 UTC · (2 months ago)	gate - SSH brute force ...	Brute-Force SSH
🇨🇿 ptlab	2026-08-26 00:45:23 UTC · (2 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 MusicLibrary	2026-08-22 03:03:37 UTC · (2 months ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-08-16 10:12:01 UTC · (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 212.73.148.27

🇮🇩 110.136.20.107

🇺🇸 71.80.48.159

🇩🇪 69.5.169.219

🇲🇾 47.250.88.100

🇸🇬 47.128.61.188

🇧🇪 35.210.132.236

🇺🇸 194.50.189.21

🇲🇽 187.189.102.110

🇧🇷 167.250.126.218

🇳🇱 86.38.187.134

🇳🇱 64.205.72.237

🇻🇳 58.186.58.111

🇺🇸 40.124.178.24

🇩🇪 2a02:c202:2359:698::1

🇺🇸 216.25.89.75

🇺🇦 194.39.227.79

🇵🇱 172.68.159.152

🇨🇳 117.173.156.172

🇳🇱 109.160.32.116