121.185.31.38
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Korea Telecom
- Usage Type
- Fixed Line ISP
- ASN
- AS4766
- Domain Name
- kt.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Cheonan, Chungcheongnam-do
No reports in the last 60 days
121.185.31.38 has been reported 36 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
36 from
18 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 Agrohim |
Gate Inet blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
|
Hacking | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-07-16 09:50:50 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 70/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 121.
|
Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 4719)
Source port: 59810
TTL: 53
Packet length: 52
TOS: 0x00
This report (for 121.185.31.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:51762 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-07-15 15:12:43 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 50899
TTL: 53
Packet length: 52
TOS: 0x00
This report (for 121.185.31.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/60023 (4 or more attempts)
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-07-15 11:20:23 | LAST=2026-07-15 11:20:24. Last seen 2026-07-15 11:20:24.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/57447 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 GoodOldTOS |
Connection to Telnet honeypot
|
Hacking | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 23
|
Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown