AbuseIPDB » 120.157.2.90

120.157.2.90 was found in our database!

This IP was reported 584 times. Confidence of Abuse is 100%: ?

100%

ISP	Telstra Limited
Usage Type	Fixed Line ISP
ASN	AS1221
Domain Name	telstra.net
Country	Australia
City	Melbourne, Victoria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 120.157.2.90

Whois 120.157.2.90

IP Abuse Reports for 120.157.2.90:

This IP address has been reported a total of 584 times from 184 distinct sources. 120.157.2.90 was first reported on February 11th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nesga12	2025-03-12 22:29:20 (6 days ago)	SMTP Brute-Force	Email Spam Brute-Force
Toxic-OS	2025-03-11 09:50:00 (1 week ago)	Tried to login on Microsoft Tenant with bruteforce password attack	Hacking Brute-Force Web App Attack
rtbh.com.tr	2025-03-10 20:49:04 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
agentics	2025-03-10 00:35:02 (1 week ago)	120.157.2.90 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale i ... show more120.157.2.90 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale industrial operation attempting unrelenting brute-force login attempts for months on end - between all CIDR ranges in the botnet, our servers receive over 800 authentication attempts per minute on smtp, imap and relative mail ports, as well as ssh, and other protocols. IP INFO: - IP 120.157.2.90 - Anycast false - City Melbourne - Region Victoria - Region Code VIC - Country Australia (AU) - Continent Oceania (OC) - Range 120.157.2.0/24 - Provider Telstra Limited - Organisation Telstra Limited - Proxy no - Type Business show less	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
rtbh.com.tr	2025-03-09 20:49:06 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Paul Smith	2025-03-09 17:19:12 (1 week ago)	Email Auth Brute force attack 28/27 in last day	Brute-Force
brocococonut	2025-03-09 13:02:40 (1 week ago)	2025-03-09 15:54:11 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Inco ... show more2025-03-09 15:54:11 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data ([email protected]) 2025-03-09 03:12:22 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data (set_id=docs) 2025-03-09 03:17:27 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data ([email protected]) 2025-03-09 13:21:24 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data ([email protected]) 2025-03-09 15:08:06 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
Dampen59	2025-03-09 11:35:21 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-09 10:48:31 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:41688: 535 Incorrect authentication data ([email protected]) 2025-03-09 11:05:51 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:34448: 535 Incorrect authentication data ([email protected]) 2025-03-09 11:07:48 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:45088: 535 Incorrect authentication data ([email protected]) 2025-03-09 11:27:43 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:48716: 535 Incorrect authentication data (set_id=bstephens) 2025-03-09 11:35:19 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:43118: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Dampen59	2025-03-09 10:12:13 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-09 09:40:18 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:40388: 535 Incorrect authentication data ([email protected]) 2025-03-09 09:48:11 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:60562: 535 Incorrect authentication data ([email protected]) 2025-03-09 09:55:21 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:50410: 535 Incorrect authentication data ([email protected]) 2025-03-09 10:10:10 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:56966: 535 Incorrect authentication data (set_id=flying) 2025-03-09 10:12:08 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:37386: 535 Incorrect authentication data ([email protected]) show less	Port Scan
ISPLtd	2025-03-09 09:17:21 (1 week ago)	Mar 9 06:17:20 rinaldo postfix/smtpd[1429]: warning: unknown[120.157.2.90]: SASL LOGIN authenticati ... show moreMar 9 06:17:20 rinaldo postfix/smtpd[1429]: warning: unknown[120.157.2.90]: SASL LOGIN authentication failed: generic failure, [email protected] ... show less	Brute-Force
Dampen59	2025-03-09 08:14:30 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-09 07:19:14 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:47414: 535 Incorrect authentication data ([email protected]) 2025-03-09 07:29:12 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:42510: 535 Incorrect authentication data (set_id=lin) 2025-03-09 08:03:08 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:54590: 535 Incorrect authentication data ([email protected]) 2025-03-09 08:11:39 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:55502: 535 Incorrect authentication data ([email protected]) 2025-03-09 08:14:28 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:40230: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2025-03-09 08:08:27 (1 week ago)	IMAP password guessing	Brute-Force
Dampen59	2025-03-09 06:28:30 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-09 06:16:40 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:42506: 535 Incorrect authentication data (set_id=machine-a-affranchir) 2025-03-09 06:22:14 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:39160: 535 Incorrect authentication data ([email protected]) 2025-03-09 06:27:39 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:55418: 535 Incorrect authentication data ([email protected]) 2025-03-09 06:27:57 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:55426: 535 Incorrect authentication data 2025-03-09 06:28:26 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:44940: 535 Incorrect authentication data ([email protected]) show less	Port Scan
dd3589	2025-03-09 06:27:01 (1 week ago)	2025-03-09T07:26:41+01:00 <masked> exim[582162]: fixed_login authenticator failed for ([120.157.2.90 ... show more2025-03-09T07:26:41+01:00 <masked> exim[582162]: fixed_login authenticator failed for ([120.157.2.90]) [120.157.2.90]: 535 Incorrect authentication data (set_id=admin) show less	Brute-Force
Dampen59	2025-03-09 05:42:36 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports ... show more(smtpauth) Failed SMTP AUTH login from 120.157.2.90 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-03-09 05:09:39 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:54588: 535 Incorrect authentication data ([email protected]) 2025-03-09 05:33:27 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:38660: 535 Incorrect authentication data (set_id=returns) 2025-03-09 05:40:44 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:54244: 535 Incorrect authentication data (set_id=jose.sanchez) 2025-03-09 05:42:24 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:35300: 535 Incorrect authentication data ([email protected]) 2025-03-09 05:42:34 dovecot_plain authenticator failed for ([120.157.2.90]) [120.157.2.90]:56030: 535 Incorrect authentication data show less	Port Scan