JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.72.221.204

61.72.221.204 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.72.221.204

Whois 61.72.221.204

IP Abuse Reports for 61.72.221.204:

This IP address has been reported a total of 5 times from 5 distinct sources. 61.72.221.204 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rafled	2026-03-01 02:44:19 (3 months ago)	Attempt to login to Wordpress Admin	Web App Attack
🇺🇸 TPI-Abuse	2026-02-28 07:46:50 (3 months ago)	(mod_security) mod_security (id:217200) triggered by 61.72.221.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217200) triggered by 61.72.221.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 02:46:42.170076 2026] [security2:error] [pid 27620:tid 27620] [client 61.72.221.204:41505] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|pbrmb1.org\|F\|2"] [data "/contactus/contact.html"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "pbrmb1.org"] [uri "/ContactUS/Contact.html"] [unique_id "aaKdYrPTQlX1_TGi0-oJRAAAAAQ"], referer: https://pbrmb1.org/ContactUS/Contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 cheatmaster.store	2026-02-26 06:14:15 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇵🇱 IROK	2026-02-24 20:03:35 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇨🇦 1gz	2026-02-20 13:05:19 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.46.157

🇧🇷 189.120.75.90

🇺🇸 147.185.132.75

🇨🇳 106.42.172.145

🇳🇱 102.135.43.119

🇳🇱 102.135.43.90

🇳🇱 102.135.43.80

🇮🇳 80.225.238.77

🇺🇸 65.49.1.121

🇲🇾 49.124.151.15

🇻🇳 45.119.84.246

🇺🇸 168.245.25.178

🇺🇸 132.226.105.224

🇳🇱 102.135.43.125

🇳🇱 102.135.43.121

🇳🇱 102.135.43.105

🇱🇹 77.90.185.97

🇰🇷 59.0.11.74

🇦🇺 45.134.20.77

🇬🇧 35.203.211.60