121.152.152.177

No. 121.152.152.177 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.

FFraud scores 121.152.152.177 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

121.152.152.177 is operated by Korea Telecom (AS4766), located in Yuseong-gu, South Korea.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. Credential stuffing and login brute force attempts across multiple services. Exploiting web server vulnerabilities and launching HTTP attacks. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.