Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Tietong

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '123.90.0.0 - 123.90.255.255'

% Abuse contact for '123.90.0.0 - 123.90.255.255' is 'ipas@cnnic.cn'

inetnum:        123.90.0.0 - 123.90.255.255
netname:        CMNET
descr:          China Mobile Communications Group Co., Ltd.
country:        CN
admin-c:        CT74-AP
tech-c:         CT74-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-CNNIC-CN
last-modified:  2026-03-23T23:48:06Z
source:         APNIC

irt:            IRT-CNNIC-CN
address:        Beijing, China
e-mail:         ipas@cnnic.cn
abuse-mailbox:  ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
auth:           # Filtered
remarks:        Please note that CNNIC is not an ISP and is not
remarks:        empowered to investigate complaints of network abuse.
remarks:        Please contact the tech-c or admin-c of the network.
remarks:        ipas@cnnic.cn is invalid
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-17T23:08:37Z
source:         APNIC

role:           chinamobile tech
address:        29, Jinrong Ave.,Xicheng district
address:        Beijing
country:        CN
phone:          +86 5268 6688
fax-no:         +86 5261 6187
e-mail:         hostmaster@chinamobile.com
admin-c:        HL1318-AP
tech-c:         HL1318-AP
nic-hdl:        ct74-AP
notify:         hostmaster@chinamobile.com
mnt-by:         MAINT-cn-cmcc
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:37:27Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.90.150.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23305
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;123.90.150.131.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100401 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 10:01:27 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 131.150.90.123.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.150.90.123.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
90.52.105.205 attackspam
May 25 18:47:13 h2022099 sshd[28016]: Failed password for r.r from 90.52.105.205 port 50144 ssh2
May 25 18:47:13 h2022099 sshd[28016]: Received disconnect from 90.52.105.205: 11: Bye Bye [preauth]
May 25 18:53:39 h2022099 sshd[28978]: Failed password for r.r from 90.52.105.205 port 45820 ssh2
May 25 18:53:39 h2022099 sshd[28978]: Received disconnect from 90.52.105.205: 11: Bye Bye [preauth]
May 25 18:55:39 h2022099 sshd[29567]: Failed password for r.r from 90.52.105.205 port 52140 ssh2
May 25 18:55:39 h2022099 sshd[29567]: Received disconnect from 90.52.105.205: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=90.52.105.205
2020-05-26 04:19:30
77.157.175.106 attack
bruteforce detected
2020-05-26 04:21:34
178.32.219.209 attackbots
prod11
...
2020-05-26 04:23:08
198.46.189.106 attackbotsspam
May 25 20:14:38 powerpi2 sshd[11689]: Invalid user mysql from 198.46.189.106 port 56708
May 25 20:14:41 powerpi2 sshd[11689]: Failed password for invalid user mysql from 198.46.189.106 port 56708 ssh2
May 25 20:20:57 powerpi2 sshd[12051]: Invalid user jonyimbo from 198.46.189.106 port 53302
...
2020-05-26 04:31:07
185.66.46.248 attack
May 25 22:20:02 mxgate1 postfix/postscreen[31941]: CONNECT from [185.66.46.248]:11499 to [176.31.12.44]:25
May 25 22:20:02 mxgate1 postfix/dnsblog[31942]: addr 185.66.46.248 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
May 25 22:20:02 mxgate1 postfix/dnsblog[32062]: addr 185.66.46.248 listed by domain b.barracudacentral.org as 127.0.0.2
May 25 22:20:03 mxgate1 postfix/dnsblog[32137]: addr 185.66.46.248 listed by domain cbl.abuseat.org as 127.0.0.2
May 25 22:20:06 mxgate1 postfix/dnsblog[32060]: addr 185.66.46.248 listed by domain zen.spamhaus.org as 127.0.0.4
May 25 22:20:08 mxgate1 postfix/postscreen[31941]: DNSBL rank 5 for [185.66.46.248]:11499
May x@x
May 25 22:20:09 mxgate1 postfix/postscreen[31941]: HANGUP after 1 from [185.66.46.248]:11499 in tests after SMTP handshake
May 25 22:20:09 mxgate1 postfix/postscreen[31941]: DISCONNECT [185.66.46.248]:11499


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.66.46.248
2020-05-26 04:25:11
139.59.84.55 attackspam
$f2bV_matches
2020-05-26 04:00:32
123.21.204.245 attack
Invalid user admin from 123.21.204.245 port 52529
2020-05-26 04:04:48
77.27.39.51 attack
Invalid user icosftp from 77.27.39.51 port 41122
2020-05-26 04:22:06
111.161.74.125 attackspam
May 25 21:25:24 santamaria sshd\[17108\]: Invalid user exploit from 111.161.74.125
May 25 21:25:24 santamaria sshd\[17108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.125
May 25 21:25:27 santamaria sshd\[17108\]: Failed password for invalid user exploit from 111.161.74.125 port 58401 ssh2
...
2020-05-26 04:11:25
218.107.213.89 attackspam
(pop3d) Failed POP3 login from 218.107.213.89 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 26 00:50:59 ir1 dovecot[2885757]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=218.107.213.89, lip=5.63.12.44, session=<96Jtt36mVIjaa9VZ>
2020-05-26 04:24:51
106.54.19.67 attackbots
SSH Brute-Forcing (server2)
2020-05-26 04:14:21
124.238.113.126 attackspambots
 TCP (SYN) 124.238.113.126:48723 -> port 29076, len 44
2020-05-26 04:03:59
157.230.132.100 attack
May 25 14:59:26 tuxlinux sshd[31420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100  user=root
May 25 14:59:28 tuxlinux sshd[31420]: Failed password for root from 157.230.132.100 port 56112 ssh2
May 25 14:59:26 tuxlinux sshd[31420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100  user=root
May 25 14:59:28 tuxlinux sshd[31420]: Failed password for root from 157.230.132.100 port 56112 ssh2
May 25 15:11:26 tuxlinux sshd[32993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.132.100  user=root
...
2020-05-26 03:57:01
106.250.131.11 attack
$f2bV_matches
2020-05-26 04:11:57
14.18.118.239 attack
May 25 22:15:55 electroncash sshd[25042]: Failed password for invalid user vrzal from 14.18.118.239 port 50900 ssh2
May 25 22:18:26 electroncash sshd[25736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.239  user=root
May 25 22:18:28 electroncash sshd[25736]: Failed password for root from 14.18.118.239 port 50344 ssh2
May 25 22:20:54 electroncash sshd[26405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.239  user=root
May 25 22:20:56 electroncash sshd[26405]: Failed password for root from 14.18.118.239 port 49782 ssh2
...
2020-05-26 04:31:50

Recently Reported IPs

182.113.193.169 120.230.28.30 120.228.15.76 120.228.150.134
115.55.28.67 115.44.145.72 112.49.238.255 112.42.63.173
111.208.81.3 110.248.61.200 101.28.138.93 101.204.175.120
42.234.193.99 42.229.130.128 36.143.208.240 218.8.167.82
175.44.117.115 171.37.154.100 120.82.113.220 120.239.200.15