119.90.53.51 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Huabei Oil Communication Co. Information Center

Hostname: unknown

Organization: unknown

Usage Type: Organization

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	May 8 05:07:18 server sshd\[213898\]: Invalid user gitlab from 119.90.53.51 May 8 05:07:18 server sshd\[213898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.90.53.51 May 8 05:07:20 server sshd\[213898\]: Failed password for invalid user gitlab from 119.90.53.51 port 45338 ssh2 ...	2019-07-17 07:56:47

Type

Details

Datetime

attackspam

May  8 05:07:18 server sshd\[213898\]: Invalid user gitlab from 119.90.53.51
May  8 05:07:18 server sshd\[213898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.90.53.51
May  8 05:07:20 server sshd\[213898\]: Failed password for invalid user gitlab from 119.90.53.51 port 45338 ssh2
...

2019-07-17 07:56:47

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.90.53.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35845
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.90.53.51.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 17 04:47:06 CST 2019
;; MSG SIZE  rcvd: 116

Host info

51.53.90.119.in-addr.arpa domain name pointer undefine.inidc.com.cn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
51.53.90.119.in-addr.arpa	name = undefine.inidc.com.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.154.168.201	attackbots	2020-09-05 11:36:43.744261-0500 localhost sshd[41861]: Failed password for root from 45.154.168.201 port 33766 ssh2	2020-09-06 00:42:19
52.231.177.18	attackspam	Port scan on 14 port(s): 3 22 146 311 366 464 500 544 563 625 777 888 912 1068	2020-09-06 00:46:20
117.50.63.120	attackbotsspam	2020-09-05T18:11:03.518879snf-827550 sshd[29339]: Invalid user joe from 117.50.63.120 port 38656 2020-09-05T18:11:05.160796snf-827550 sshd[29339]: Failed password for invalid user joe from 117.50.63.120 port 38656 ssh2 2020-09-05T18:15:33.546710snf-827550 sshd[29364]: Invalid user user1 from 117.50.63.120 port 57836 ...	2020-09-06 00:00:00
118.69.55.101	attackbotsspam	Sep 5 03:51:27 myvps sshd[27152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.55.101 Sep 5 03:51:30 myvps sshd[27152]: Failed password for invalid user anna from 118.69.55.101 port 50536 ssh2 Sep 5 03:54:44 myvps sshd[29241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.55.101 ...	2020-09-06 00:39:09
190.37.233.232	attackspambots	Honeypot attack, port: 445, PTR: 190-37-233-232.dyn.dsl.cantv.net.	2020-09-06 00:26:05
207.58.189.248	attack	Return-Path: Received: from tnpkovernights.com (207.58.189.248.tnpkovernight.com. [207.58.189.248]) by mx.google.com with ESMTPS id d22si3601345qka.209.2020.09.03.20.16.42 for <> (version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128); Thu, 03 Sep 2020 20:16:42 -0700 (PDT) Received-SPF: neutral (google.com: 207.58.189.248 is neither permitted nor denied by best guess record for domain of return@restojob.lp) client-ip=207.58.189.248; Authentication-Results: mx.google.com; dkim=pass header.i=@tnpkovernight.com header.s=key1 header.b=w0LdF1rj; spf=neutral (google.com: 207.58.189.248 is neither permitted nor denied by best guess record for domain of return@restojob.lp) smtp.mailfrom=return@restojob.lp	2020-09-06 00:00:18
188.120.128.73	attack	Sep 4 18:48:46 mellenthin postfix/smtpd[29435]: NOQUEUE: reject: RCPT from unknown[188.120.128.73]: 554 5.7.1 Service unavailable; Client host [188.120.128.73] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.120.128.73; from= to= proto=ESMTP helo=	2020-09-06 00:44:22
103.78.180.238	attackspambots	Port Scan ...	2020-09-06 00:41:47
142.0.162.24	attackbotsspam	Spam	2020-09-06 00:38:53
106.75.222.121	attack	Sep 5 12:37:16 jumpserver sshd[247037]: Invalid user praveen from 106.75.222.121 port 46144 Sep 5 12:37:18 jumpserver sshd[247037]: Failed password for invalid user praveen from 106.75.222.121 port 46144 ssh2 Sep 5 12:39:20 jumpserver sshd[247042]: Invalid user ares from 106.75.222.121 port 39700 ...	2020-09-06 00:22:09
45.82.136.246	attackbots	Sep 5 17:35:35 deb10 sshd[22117]: Invalid user ansible from 45.82.136.246 port 51024 Sep 5 17:35:48 deb10 sshd[22124]: User root from 45.82.136.246 not allowed because not listed in AllowUsers	2020-09-06 00:23:03
190.121.144.122	attackbotsspam	Honeypot attack, port: 445, PTR: 190121144122.ip14.static.mediacommerce.com.co.	2020-09-05 23:59:12
134.122.112.119	attackbots	Invalid user lulu from 134.122.112.119 port 49298	2020-09-06 00:06:44
88.249.0.65	attackbots	Honeypot attack, port: 81, PTR: 88.249.0.65.static.ttnet.com.tr.	2020-09-06 00:43:13
104.131.84.222	attack	2020-09-05 05:12:18.606071-0500 localhost sshd[10204]: Failed password for root from 104.131.84.222 port 33793 ssh2	2020-09-06 00:16:50

Recently Reported IPs

82.221.131.71	82.221.131.5	18.124.161.10	195.126.40.218
81.14.204.34	194.196.140.81	202.142.96.172	23.218.110.61
177.70.211.36	65.78.193.217	100.150.21.151	89.141.220.28
141.129.120.174	45.175.151.204	136.11.1.197	167.88.46.84
39.40.57.119	182.243.82.173	80.67.19.254	100.245.103.130