This IP address has been reported a total of
10
times from
10 distinct
sources.
102.90.123.54 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /webmail/ | 2026-09-18 14:50 UTC
show less
Repeated requests for suspicious nonexistent URLs, for example: /webmail/ (HTTP port 443, user agent ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /webmail/ (HTTP port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0")
show less
Suspicious activity detected from IP 102.90.123.54 based on mailserver logs.
Sample logs:
2026-08-31 ...
show moreSuspicious activity detected from IP 102.90.123.54 based on mailserver logs.
Sample logs:
2026-08-31 19:01:33,764 INFO [qtp2102534528-283940] [name=**@*.id;ip=172.16.0.182;oip=102.90.123.54;oport=17406;oproto=smtp;port=39468;soapId=3664f117;] soap - AuthRequest elapsed=1
2026-08-31 19:01:34,893 INFO [qtp2102534528-283940] [name=**@*.id;ip=172.16.0.182;oip=102.90.123.54;oport=17406;oproto=smtp;port=39482;soapId=3664f118;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invalid credentials
2026-08-31 19:01:34,893 INFO [qtp2102534528-283940] [name=**@*.id;ip=172.16.0.182;oip=102.90.123.54;oport=17406;oproto=smtp;port=39482;soapId=3664f118;] soap - AuthRequest elapsed=1
2026-08-31 19:01:40,005 INFO [qtp2102534528-283988] [name=**@*.id;ip=172.16.0.182;oip=102.90.123.54;oport=17409;oproto=smtp;port=39498;soapId=3664f119;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate:
show less
2026-08-31T10:17:25.987345+02:00 mail postfix/smtps/smtpd[2886209]: lost connection after CONNECT fr ...
show more2026-08-31T10:17:25.987345+02:00 mail postfix/smtps/smtpd[2886209]: lost connection after CONNECT from unknown[102.90.123.54]
2026-08-31T10:18:31.038745+02:00 mail postfix/smtps/smtpd[2885590]: warning: unknown[102.90.123.54]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-08-31T10:18:37.341517+02:00 mail postfix/smtps/smtpd[2885590]: warning: unknown[102.90.123.54]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less