This IP address has been reported a total of
164
times from
136 distinct
sources.
57.131.21.220 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Repeated failed login attempts, for example: Disconnected from invalid user admin1 57.131.21.220 por ...
show moreRepeated failed login attempts, for example: Disconnected from invalid user admin1 57.131.21.220 port 52204 [preauth] (SSH port 22)
show less
Brute-Force
SSH
Anonymous
Oct 22 10:26:43 50581 sshd[3998193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreOct 22 10:26:43 50581 sshd[3998193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220
Oct 22 10:26:45 50581 sshd[3998193]: Failed password for invalid user gitlab from 57.131.21.220 port 42824 ssh2
Oct 22 10:32:49 50581 sshd[4000962]: Invalid user admin1 from 57.131.21.220 port 56940
...
show less
2026-10-22T02:26:19.921951-06:00 vaako sshd[3664141]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-22T02:26:19.921951-06:00 vaako sshd[3664141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220
2026-10-22T02:26:22.057409-06:00 vaako sshd[3664141]: Failed password for invalid user gitlab from 57.131.21.220 port 53662 ssh2
2026-10-22T02:32:47.114140-06:00 vaako sshd[3665184]: Invalid user admin1 from 57.131.21.220 port 45614
...
show less
2026-10-22T10:29:33.543718+02:00 yucca sshd-session[1153674]: Invalid user gitlab from 57.131.21.220 ...
show more2026-10-22T10:29:33.543718+02:00 yucca sshd-session[1153674]: Invalid user gitlab from 57.131.21.220 port 45584
...
show less
Oct 22 11:06:48 fastdl sshd[2718654]: Failed password for root from 57.131.21.220 port 52688 ssh2
Oc ...
show moreOct 22 11:06:48 fastdl sshd[2718654]: Failed password for root from 57.131.21.220 port 52688 ssh2
Oct 22 11:07:50 fastdl sshd[2719964]: Invalid user azureuser from 57.131.21.220 port 59662
Oct 22 11:07:50 fastdl sshd[2719964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220
Oct 22 11:07:53 fastdl sshd[2719964]: Failed password for invalid user azureuser from 57.131.21.220 port 59662 ssh2
Oct 22 11:08:50 fastdl sshd[2721141]: Invalid user edith from 57.131.21.220 port 54378
Oct 22 11:08:50 fastdl sshd[2721141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220
Oct 22 11:08:52 fastdl sshd[2721141]: Failed password for invalid user edith from 57.131.21.220 port 54378 ssh2
...
show less
Report 2764279 with IP 3807270 for SSH brute-force attack by source 3806504 via ssh-honeypot/0.2.0+h ...
show moreReport 2764279 with IP 3807270 for SSH brute-force attack by source 3806504 via ssh-honeypot/0.2.0+http
show less
2026-10-22T10:00:08.550189+02:00 euve sshd-session[275175]: Disconnected from authenticating user ro ...
show more2026-10-22T10:00:08.550189+02:00 euve sshd-session[275175]: Disconnected from authenticating user root 57.131.21.220 port 41224 [preauth]
2026-10-22T10:05:15.972526+02:00 euve sshd-session[275272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220 user=root
2026-10-22T10:05:18.200085+02:00 euve sshd-session[275272]: Failed password for root from 57.131.21.220 port 55568 ssh2
...
show less
2026-10-22T10:38:38.494277+03:00 grape sshd-session[75130]: Invalid user user from 57.131.21.220 por ...
show more2026-10-22T10:38:38.494277+03:00 grape sshd-session[75130]: Invalid user user from 57.131.21.220 port 51432
2026-10-22T10:39:38.601226+03:00 grape sshd-session[76601]: Connection from 57.131.21.220 port 55284 on 192.168.0.100 port 22 rdomain ""
2026-10-22T10:39:38.910245+03:00 grape sshd-session[76601]: Invalid user ubuntu from 57.131.21.220 port 55284
2026-10-22T10:40:40.746020+03:00 grape sshd-session[78308]: Connection from 57.131.21.220 port 60018 on 192.168.0.100 port 22 rdomain ""
2026-10-22T10:40:41.058190+03:00 grape sshd-session[78308]: User root from 57.131.21.220 not allowed because none of user's groups are listed in AllowGroups
...
show less
Oct 22 07:35:31 mtrtools-node sshd[3746152]: Failed password for invalid user axel from 57.131.21.22 ...
show moreOct 22 07:35:31 mtrtools-node sshd[3746152]: Failed password for invalid user axel from 57.131.21.220 port 53798 ssh2
Oct 22 07:37:46 mtrtools-node sshd[3746394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220 user=root
Oct 22 07:37:48 mtrtools-node sshd[3746394]: Failed password for root from 57.131.21.220 port 58288 ssh2
...
show less
2026-10-22T01:33:05.750102-06:00 b146-32 sshd[1138182]: pam_sss(sshd:auth): authentication failure; ...
show more2026-10-22T01:33:05.750102-06:00 b146-32 sshd[1138182]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.131.21.220 user=axel
2026-10-22T01:33:07.736411-06:00 b146-32 sshd[1138182]: Failed password for invalid user axel from 57.131.21.220 port 36090 ssh2
2026-10-22T01:37:28.632947-06:00 b146-32 sshd[1138654]: User root from 57.131.21.220 not allowed because none of user's groups are listed in AllowGroups
...
show less
👿 57.131.21.220 has been involved in malicious and brute-force activity. Reported by umarmohammad.xy ...
show more👿 57.131.21.220 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz
show less
Brute-Force
SSH
Showing 1 to
15
of 164 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩