JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.72.221.94

61.72.221.94 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.72.221.94

Whois 61.72.221.94

IP Abuse Reports for 61.72.221.94:

This IP address has been reported a total of 7 times from 6 distinct sources. 61.72.221.94 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-03-07 23:41:26 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-06 11:42:19 (3 months ago)	(mod_security) mod_security (id:217200) triggered by 61.72.221.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217200) triggered by 61.72.221.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 06:42:12.908597 2026] [security2:error] [pid 19598:tid 19598] [client 61.72.221.94:43097] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|globalsolutions.technology\|F\|2"] [data "/wp-json/contact-form-7/v1/contact-forms/1379/feedback"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "globalsolutions.technology"] [uri "/wp-json/contact-form-7/v1/contact-forms/1379/feedback"] [unique_id "aaq9lLDn7psYPqyX5We5mwAAABA"], referer: https://globalsolutions.technology/contacts/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 Bharat Datacenter	2026-03-05 11:22:51 (3 months ago)	3: date=2026-03-05 time=16:50:40 eventtime=1772709640552509260 tz="+0530" logid="0720018432" type="u ... show more 3: date=2026-03-05 time=16:50:40 eventtime=1772709640552509260 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=61.72.221.94 srccountry="Korea, Republic of" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=179740 attack="tcp_syn_flood" srcport=52449 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 5578 > threshold 2000, repeats 179740 times since last log, pps 5633 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇦🇱 cheatmaster.store	2026-02-27 01:47:45 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇵🇱 cheatmaster.store	2026-02-25 23:18:21 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇵🇱 IROK	2026-02-24 02:49:42 (4 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇨🇦 1gz	2026-02-20 13:05:17 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/138.0 Mobile/15E148 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.108.109.37

🇩🇪 213.209.159.231

🇧🇷 191.7.53.149

🇨🇴 179.15.227.41

🇸🇬 139.99.38.177

🇸🇬 118.194.234.189

🇺🇸 103.203.57.12

🇳🇴 87.120.104.75

🇮🇳 203.174.22.19

🇧🇷 191.183.198.31

🇫🇷 185.177.72.69

🇺🇸 173.252.69.2

🇺🇸 159.89.80.103

🇨🇳 123.12.198.49

🇪🇸 90.162.13.50

🇺🇸 67.197.111.225

🇱🇺 64.89.160.135

🇺🇸 50.38.134.17

🇪🇸 46.24.47.94

🇺🇸 198.11.178.150