JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.150.229.80

Activity Trending Down

Abuse Confidence Score

30% Elevated

12 reports

12 reporters · latest 4 weeks ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Daegu, Daegu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 12 distinct reporters

First reported

September 17th 2026

Most recent report

4 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 2 🇳🇱 Netherlands 2

Most common categories Brute-Force 12 SSH 7 Port Scan 2 Web App Attack 2 FTP Brute-Force 1

Old reports The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 stom	2026-10-11 04:35:29 UTC · (4 weeks ago)	2026-10-11T04:35:23.767273 socky.stom66.co.uk proftpd[257638]: session[257638] 0.0.0.0 (121.150.229.80[121.150.229.80]): USER user: no such user found from 121.150.229.80 [121.150.229.80] to ::ffff:5.79.80.26:2222 ...	Brute-Force FTP Brute-Force
Anonymous	2026-10-06 17:41:36 UTC · (1 month ago)	SSH Honeypot detected multiple failed login attempts	Brute-Force SSH
🇩🇪 ghostwarriors	2026-10-06 03:50:16 UTC · (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SANYALnet Labs	2026-10-06 03:39:33 UTC · (1 month ago)	Oct 6 03:36:09 gigabyte-h410m sshd[949944]: Invalid user AdminGPON from 121.150.229.80 port 36616 Oct 6 03:36:12 gigabyte-h410m sshd[949944]: Failed password for invalid user AdminGPON from 121.150.229.80 port 36616 ssh2 Oct 6 03:36:13 gigabyte-h4 ... show more Oct 6 03:36:09 gigabyte-h410m sshd[949944]: Invalid user AdminGPON from 121.150.229.80 port 36616 Oct 6 03:36:12 gigabyte-h410m sshd[949944]: Failed password for invalid user AdminGPON from 121.150.229.80 port 36616 ssh2 Oct 6 03:36:13 gigabyte-h410m sshd[949944]: Connection closed by invalid user AdminGPON 121.150.229.80 port 36616 [preauth] ... show less	Brute-Force
🇩🇪 Kitki30.com	2026-10-03 05:34:00 UTC · (1 month ago)	SSH Login Failed (server 2). Log: 2026-10-03T05:33:57.742642+00:00 nic0 sshd[681460]: Invalid user admin from 121.150.229.80 port 42586	Brute-Force SSH Port Scan
🇸🇬 drewf.ink	2026-09-28 06:34:46 UTC · (1 month ago)	[06:34] Attempted SSH login with credentials root:a***n	Brute-Force SSH
🇺🇸 bigscoots.com	2026-09-25 15:22:37 UTC · (1 month ago)	121.150.229.80 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 10:22:17 12525 sshd[28597]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more 121.150.229.80 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 10:22:17 12525 sshd[28597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.150.229.80 user=root Sep 25 10:22:19 12525 sshd[28597]: Failed password for root from 121.150.229.80 port 51914 ssh2 Sep 25 09:34:06 12525 sshd[3048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.77.124.248 user=root Sep 25 10:19:09 12525 sshd[26977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.46.149.117 user=root Sep 25 10:19:11 12525 sshd[26977]: Failed password for root from 211.46.149.117 port 34480 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇳🇱 Alt255	2026-09-22 13:19:41 UTC · (1 month ago)	[ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 121.150.229.80 - - [22/Sep/2026:15:19:32 +0200] "POST /wp-login.php HTTP/1.1" 200 14734 "https://kisk.nl/wp-login.php" "Mozilla/5.0 (Win ... show more [ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 121.150.229.80 - - [22/Sep/2026:15:19:32 +0200] "POST /wp-login.php HTTP/1.1" 200 14734 "https://kisk.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.150.229.80 - - [22/Sep/2026:15:19:34 +0200] "POST /wp-login.php HTTP/1.1" 200 14734 "https://kisk.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.150.229.80 - - [22/Sep/2026:15:19:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14734 "https://kisk.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.150.229.80 - - [22/Sep/2026:15:19:38 +0200] "POST /wp-login.php HTTP/1.1" 200 14734 "https://kisk.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10 ... show less	Brute-Force Web App Attack
🇪🇸 DXC-0	2026-09-20 03:00:13 UTC · (1 month ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇸🇬 bret.dk	2026-09-18 05:46:06 UTC · (1 month ago)	Sep 18 05:46:03 sg-mirror sshd[3937840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.150.229.80 Sep 18 05:46:06 sg-mirror sshd[3937840]: Failed password for invalid user admin from 121.150.229.80 port ... show more Sep 18 05:46:03 sg-mirror sshd[3937840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.150.229.80 Sep 18 05:46:06 sg-mirror sshd[3937840]: Failed password for invalid user admin from 121.150.229.80 port 54118 ssh2 ... show less	Brute-Force SSH
🇫🇷 Phenix Info	2026-09-18 02:11:48 UTC · (1 month ago)	SmallGuard.fr/Prestashop SSH Login Failed	Brute-Force
🇩🇪 Autobusero	2026-09-17 22:23:57 UTC · (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 206.206.112.103

🇳🇱 195.178.110.232

🇺🇸 71.192.75.210

🇵🇱 51.68.151.167

🇺🇸 47.251.99.107

🇺🇸 44.211.63.124

🇺🇸 2001:470:1:332::118

🇺🇸 172.58.120.163

🇫🇷 169.58.196.50

🇯🇵 139.162.119.61

🇺🇸 98.159.44.2

🇱🇧 94.187.37.132

🇳🇱 77.239.124.67

🇺🇸 73.62.96.153

🇺🇸 47.77.219.199

🇦🇺 45.248.78.121

🇸🇬 45.43.63.34

🇺🇸 45.33.40.18

🇭🇰 34.92.168.145

🇦🇷 186.4.94.146