City: unknown
Region: unknown
Country: China
Internet Service Provider: China Tietong
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '123.90.0.0 - 123.90.255.255'
% Abuse contact for '123.90.0.0 - 123.90.255.255' is 'ipas@cnnic.cn'
inetnum: 123.90.0.0 - 123.90.255.255
netname: CMNET
descr: China Mobile Communications Group Co., Ltd.
country: CN
admin-c: CT74-AP
tech-c: CT74-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
last-modified: 2026-03-23T23:48:06Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
remarks: ipas@cnnic.cn is invalid
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-17T23:08:37Z
source: APNIC
role: chinamobile tech
address: 29, Jinrong Ave.,Xicheng district
address: Beijing
country: CN
phone: +86 5268 6688
fax-no: +86 5261 6187
e-mail: hostmaster@chinamobile.com
admin-c: HL1318-AP
tech-c: HL1318-AP
nic-hdl: ct74-AP
notify: hostmaster@chinamobile.com
mnt-by: MAINT-cn-cmcc
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:37:27Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.90.57.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;123.90.57.81. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101400 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 16:05:29 CST 2026
;; MSG SIZE rcvd: 105Host 81.57.90.123.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 81.57.90.123.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.142.120.58 | attackbotsspam | 2020-10-12 12:42:11 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=janjan@no-server.de\) 2020-10-12 12:47:12 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data 2020-10-12 12:47:17 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data 2020-10-12 12:47:21 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data 2020-10-12 12:51:51 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=werewolf@no-server.de\) ... |
2020-10-12 19:03:44 |
| 222.84.255.33 | attackbots | detected by Fail2Ban |
2020-10-12 18:53:44 |
| 64.52.85.67 | attackspam | $f2bV_matches |
2020-10-12 19:18:19 |
| 72.167.190.206 | attackspambots | 72.167.190.206 - - \[12/Oct/2020:09:16:54 +0300\] "POST /beta/xmlrpc.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-" 72.167.190.206 - - \[12/Oct/2020:09:16:54 +0300\] "POST /BETA/xmlrpc.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" "-" ... |
2020-10-12 19:08:29 |
| 218.161.67.234 | attackbotsspam | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-10-12 18:48:06 |
| 115.159.152.188 | attackbots | (sshd) Failed SSH login from 115.159.152.188 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 06:06:29 server sshd[28129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.152.188 user=root Oct 12 06:06:31 server sshd[28129]: Failed password for root from 115.159.152.188 port 58068 ssh2 Oct 12 06:22:59 server sshd[465]: Invalid user alexie from 115.159.152.188 port 33666 Oct 12 06:23:01 server sshd[465]: Failed password for invalid user alexie from 115.159.152.188 port 33666 ssh2 Oct 12 06:33:33 server sshd[3319]: Invalid user webupload from 115.159.152.188 port 59592 |
2020-10-12 18:44:50 |
| 104.236.182.223 | attack | Oct 12 08:22:03 pl2server sshd[14942]: Invalid user ivanna from 104.236.182.223 port 34712 Oct 12 08:22:03 pl2server sshd[14942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223 Oct 12 08:22:05 pl2server sshd[14942]: Failed password for invalid user ivanna from 104.236.182.223 port 34712 ssh2 Oct 12 08:22:05 pl2server sshd[14942]: Received disconnect from 104.236.182.223 port 34712:11: Bye Bye [preauth] Oct 12 08:22:05 pl2server sshd[14942]: Disconnected from 104.236.182.223 port 34712 [preauth] Oct 12 09:02:16 pl2server sshd[21874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223 user=r.r Oct 12 09:02:18 pl2server sshd[21874]: Failed password for r.r from 104.236.182.223 port 41620 ssh2 Oct 12 09:02:18 pl2server sshd[21874]: Received disconnect from 104.236.182.223 port 41620:11: Bye Bye [preauth] Oct 12 09:02:18 pl2server sshd[21874]: Disconnected from 104......... ------------------------------- |
2020-10-12 19:04:52 |
| 212.237.36.83 | attackspambots | 2020-10-12T06:35:34.690600shield sshd\[6787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.36.83 user=root 2020-10-12T06:35:36.598807shield sshd\[6787\]: Failed password for root from 212.237.36.83 port 49582 ssh2 2020-10-12T06:40:09.086052shield sshd\[7638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.36.83 user=root 2020-10-12T06:40:11.083893shield sshd\[7638\]: Failed password for root from 212.237.36.83 port 56550 ssh2 2020-10-12T06:44:24.975572shield sshd\[8503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.36.83 user=root |
2020-10-12 18:42:14 |
| 159.65.149.139 | attack | Oct 12 10:50:54 django-0 sshd[31079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.139 user=root Oct 12 10:50:56 django-0 sshd[31079]: Failed password for root from 159.65.149.139 port 40890 ssh2 ... |
2020-10-12 18:47:18 |
| 49.233.173.90 | attack | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "eddie" at 2020-10-12T07:47:37Z |
2020-10-12 18:34:41 |
| 124.156.146.87 | attack | (sshd) Failed SSH login from 124.156.146.87 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 04:52:18 server4 sshd[30528]: Invalid user git-user from 124.156.146.87 Oct 12 04:52:18 server4 sshd[30528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.146.87 Oct 12 04:52:20 server4 sshd[30528]: Failed password for invalid user git-user from 124.156.146.87 port 57980 ssh2 Oct 12 04:55:21 server4 sshd[451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.146.87 user=root Oct 12 04:55:23 server4 sshd[451]: Failed password for root from 124.156.146.87 port 34926 ssh2 |
2020-10-12 18:57:35 |
| 187.62.177.104 | attack | (smtpauth) Failed SMTP AUTH login from 187.62.177.104 (BR/Brazil/104.177.62.187.cnnet.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-10-12 06:10:28 plain authenticator failed for ([187.62.177.104]) [187.62.177.104]: 535 Incorrect authentication data (set_id=marketing@rahapharm.com) |
2020-10-12 18:44:09 |
| 139.162.122.110 | attack | Oct 12 09:33:08 nopemail auth.info sshd[1766]: Invalid user from 139.162.122.110 port 35870 ... |
2020-10-12 19:07:41 |
| 180.167.225.118 | attack | Invalid user ronda from 180.167.225.118 port 35142 |
2020-10-12 18:55:06 |
| 106.13.161.17 | attack | 106.13.161.17 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 12 02:48:23 jbs1 sshd[9341]: Failed password for root from 139.199.18.194 port 50498 ssh2 Oct 12 02:48:27 jbs1 sshd[9395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.107.214 user=root Oct 12 02:48:29 jbs1 sshd[9395]: Failed password for root from 175.24.107.214 port 47498 ssh2 Oct 12 02:49:06 jbs1 sshd[9764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.161.17 user=root Oct 12 02:49:07 jbs1 sshd[9772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.246 user=root IP Addresses Blocked: 139.199.18.194 (CN/China/-) 175.24.107.214 (CN/China/-) |
2020-10-12 18:58:49 |