121.57.3.131
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET neimeng province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Hohhot, Inner Mongolia
Abuse Reports
Total reports
18 from
14 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:41402 dst:23
|
Port Scan | |
| 🇩🇪 Tsumugi Kotobuki |
Telnet Brute-Force | Events: 1 | Ports: 23/Telnet | Auth: password(1x) | rDNS: 131.3.57.121.broad.hh.nm.dynamic.163data.com.cn | F2B/telnet-honeypot-bruteforce@2026-10-28T20:09:02Z
|
Brute-Force | |
| 🇩🇪 _ArminS_ |
SP-Scan 34342:23 detected 2026.10.28 09:50:16
blocked until 2026.12.17 02:53:03
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 23 with flags: SYN
|
Port Scan | |
| Anonymous |
Network service scanning detected by FortiGate; source quarantined.
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:37485 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-27 16:57:40 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-27 01:22:22 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 49 observed events targeting TCP/23 across Contabo Windows, T-Pot EU.
|
Port Scan | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 121.57.3.131 to port 23 (ger-01) [TELNET]
|
Exploited Host | |
| 🇧🇾 stroytrest |
2026-10-26T20:54:20.171539+03:00 gate kernel: [2099550.061194] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=121.57.3.131 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=35469 DF PROTO=TCP SPT=52618 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:33051 dst:23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown