JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.173.90.49

123.173.90.49 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 39%: ?

39%

ISP	CHINANET JILIN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.173.90.49

Whois 123.173.90.49

IP Abuse Reports for 123.173.90.49:

This IP address has been reported a total of 118 times from 35 distinct sources. 123.173.90.49 was first reported on February 28th 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-10 22:45:00 (2 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-06-10 22:28:07 (3 hours ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇧🇾 stroytrest	2026-06-10 21:39:31 (3 hours ago)	2026-06-11T00:39:29.779341+03:00 gate kernel: [1442168.946184] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-06-11T00:39:29.779341+03:00 gate kernel: [1442168.946184] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=123.173.90.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=49249 DF PROTO=TCP SPT=39502 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cybsecaoccol	2026-06-10 16:00:20 (9 hours ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇧🇾 sashan	2026-06-10 06:05:31 (19 hours ago)	2026-06-10T09:05:31.365971+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=123.173.90. ... show more 2026-06-10T09:05:31.365971+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=123.173.90.49 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=6285 DF PROTO=TCP SPT=39830 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 takikawa.b-l.ca	2025-01-04 17:06:35 (1 year ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 PulseServers	2025-01-03 10:18:02 (1 year ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - US10 Honeypot ...	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2025-01-03 10:17:06 (1 year ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇨🇦 oh.mg	2025-01-03 09:26:38 (1 year ago)	Jan 3 04:26:08 frank sshd[405978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jan 3 04:26:08 frank sshd[405978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.173.90.49 user=root Jan 3 04:26:15 frank sshd[406531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.173.90.49 user=root Jan 3 04:26:23 frank sshd[407084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.173.90.49 user=root Jan 3 04:26:31 frank sshd[407916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.173.90.49 user=root Jan 3 04:26:37 frank sshd[408468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.173.90.49 user=root ... show less	Port Scan Brute-Force
🇺🇸 wolfogre	2025-01-02 21:37:10 (1 year ago)	Funeypot detected 3129 ssh attempts in 6h2m24s. Last by user "root", password "Hg12**789!", client ... show more Funeypot detected 3129 ssh attempts in 6h2m24s. Last by user "root", password "Hg12**789!", client "Go". show less	Brute-Force SSH
🇺🇸 wolfogre	2025-01-02 21:22:05 (1 year ago)	Funeypot detected 2999 ssh attempts in 5h47m19s. Last by user "root", password "R2@***123", client ... show more Funeypot detected 2999 ssh attempts in 5h47m19s. Last by user "root", password "R2@***123", client "Go". show less	Brute-Force SSH
🇺🇸 wolfogre	2025-01-02 21:06:59 (1 year ago)	Funeypot detected 2869 ssh attempts in 5h32m12s. Last by user "root", password "zt*15", client "Go ... show more Funeypot detected 2869 ssh attempts in 5h32m12s. Last by user "root", password "zt*15", client "Go". show less	Brute-Force SSH
🇺🇸 wolfogre	2025-01-02 20:51:57 (1 year ago)	Funeypot detected 2737 ssh attempts in 5h17m11s. Last by user "root", password "123q**E!@#", clien ... show more Funeypot detected 2737 ssh attempts in 5h17m11s. Last by user "root", password "123q**E!@#", client "Go". show less	Brute-Force SSH
🇺🇸 wolfogre	2025-01-02 20:36:54 (1 year ago)	Funeypot detected 2605 ssh attempts in 5h2m7s. Last by user "root", password "he**o1", client "Go".	Brute-Force SSH
🇺🇸 wolfogre	2025-01-02 20:21:49 (1 year ago)	Funeypot detected 2473 ssh attempts in 4h47m3s. Last by user "root", password "As**14", client "Go ... show more Funeypot detected 2473 ssh attempts in 4h47m3s. Last by user "root", password "As**14", client "Go". show less	Brute-Force SSH

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.112

🇨🇱 200.54.96.2

🇬🇧 188.240.59.4

🇳🇱 93.123.72.183

🇺🇸 20.163.6.253

🇬🇧 5.226.140.89

🇷🇴 2.57.122.177

🇨🇦 159.203.15.110

🇨🇴 152.203.64.120

🇺🇸 151.245.251.245

🇫🇷 151.80.77.244

🇬🇧 89.37.172.132

🇵🇱 77.83.246.97

🇺🇸 65.49.1.94

🇭🇰 47.238.238.18

🇳🇱 45.148.10.183

🇵🇪 38.253.165.84

🇬🇧 35.203.211.198

🇬🇧 193.32.209.240

🇳🇱 176.65.139.217