城市(city): Taiyuan
省份(region): Shanxi
国家(country): China
运营商(isp): China Mobile
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '111.0.0.0 - 111.63.255.255'
% Abuse contact for '111.0.0.0 - 111.63.255.255' is 'abuse@chinamobile.com'
inetnum: 111.0.0.0 - 111.63.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: ct74-AP
tech-c: HL1318-AP
abuse-c: AC2006-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
mnt-irt: IRT-CHINAMOBILE-CN
last-modified: 2020-07-15T13:10:04Z
source: APNIC
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
remarks: abuse@chinamobile.com was validated on 2025-09-15
mnt-by: MAINT-CN-CMCC
last-modified: 2025-11-18T00:26:27Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
org-type: LIR
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5268-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:14:48Z
source: APNIC
role: ABUSE CHINAMOBILECN
country: ZZ
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
phone: +000000000
e-mail: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
nic-hdl: AC2006-AP
remarks: Generated from irt object IRT-CHINAMOBILE-CN
remarks: abuse@chinamobile.com was validated on 2025-09-15
abuse-mailbox: abuse@chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2025-09-15T02:20:13Z
source: APNIC
role: chinamobile tech
address: 29, Jinrong Ave.,Xicheng district
address: Beijing
country: CN
phone: +86 5268 6688
fax-no: +86 5261 6187
e-mail: hostmaster@chinamobile.com
admin-c: HL1318-AP
tech-c: HL1318-AP
nic-hdl: ct74-AP
notify: hostmaster@chinamobile.com
mnt-by: MAINT-cn-cmcc
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:37:27Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
% Information related to '111.0.0.0/10AS9808'
route: 111.0.0.0/10
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2012-02-15T08:47:26Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.53.37.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;111.53.37.90. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026030901 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 09:20:19 CST 2026
;; MSG SIZE rcvd: 105
Host 90.37.53.111.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 90.37.53.111.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 211.210.32.121 | attackbots | xmlrpc attack |
2020-04-25 13:07:36 |
| 51.89.57.123 | attack | Apr 25 06:09:48 server sshd[6307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.57.123 Apr 25 06:09:50 server sshd[6307]: Failed password for invalid user allan from 51.89.57.123 port 47892 ssh2 Apr 25 06:15:42 server sshd[6938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.57.123 ... |
2020-04-25 13:04:24 |
| 94.23.160.185 | attackbotsspam | Apr 25 06:12:09 vpn01 sshd[10324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.160.185 Apr 25 06:12:10 vpn01 sshd[10324]: Failed password for invalid user xgridagent from 94.23.160.185 port 46668 ssh2 ... |
2020-04-25 12:30:46 |
| 37.187.150.194 | attack | Automated report - ssh fail2ban: Apr 25 06:28:47 Unable to negotiate with 37.187.150.194 port=56824: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 25 06:29:17 Unable to negotiate with 37.187.150.194 port=60122: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 25 06:29:46 Unable to negotiate with 37.187.150.194 port=35188: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 25 06:30:15 Unable to negotiate with 37.187.150.194 port=38486: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-04-25 12:58:34 |
| 180.89.58.27 | attackspam | prod8 ... |
2020-04-25 13:03:55 |
| 68.183.47.20 | attackspam | Automatic report - Port Scan Attack |
2020-04-25 13:02:46 |
| 188.143.52.153 | attack | xmlrpc attack |
2020-04-25 13:00:07 |
| 209.99.131.226 | attackbots | Automatic report - Banned IP Access |
2020-04-25 13:08:13 |
| 198.108.67.55 | attack | Apr 25 05:58:50 debian-2gb-nbg1-2 kernel: \[10046071.971920\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=32 ID=11609 PROTO=TCP SPT=14996 DPT=8181 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-25 12:49:24 |
| 106.13.138.236 | attack | 2020-04-25T06:00:27.742439vps751288.ovh.net sshd\[18497\]: Invalid user tanis from 106.13.138.236 port 47462 2020-04-25T06:00:27.752913vps751288.ovh.net sshd\[18497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236 2020-04-25T06:00:29.720683vps751288.ovh.net sshd\[18497\]: Failed password for invalid user tanis from 106.13.138.236 port 47462 ssh2 2020-04-25T06:06:13.801704vps751288.ovh.net sshd\[18565\]: Invalid user mario from 106.13.138.236 port 33972 2020-04-25T06:06:13.807174vps751288.ovh.net sshd\[18565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236 |
2020-04-25 12:32:09 |
| 23.121.22.212 | attackspambots | port scan and connect, tcp 23 (telnet) |
2020-04-25 12:52:54 |
| 122.114.249.12 | attackspam | MYH,DEF GET /wp-login.php |
2020-04-25 12:52:34 |
| 222.186.42.137 | attack | Apr 25 06:52:31 legacy sshd[29860]: Failed password for root from 222.186.42.137 port 24412 ssh2 Apr 25 06:52:40 legacy sshd[29863]: Failed password for root from 222.186.42.137 port 55915 ssh2 ... |
2020-04-25 12:54:32 |
| 180.166.141.58 | attackspam | Apr 25 06:32:33 debian-2gb-nbg1-2 kernel: \[10048094.935811\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=54165 PROTO=TCP SPT=50029 DPT=56144 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-25 12:45:59 |
| 222.186.30.57 | attackbots | 2020-04-25T06:10:28.849717vps773228.ovh.net sshd[11809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-04-25T06:10:31.323181vps773228.ovh.net sshd[11809]: Failed password for root from 222.186.30.57 port 49812 ssh2 2020-04-25T06:10:28.849717vps773228.ovh.net sshd[11809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-04-25T06:10:31.323181vps773228.ovh.net sshd[11809]: Failed password for root from 222.186.30.57 port 49812 ssh2 2020-04-25T06:10:33.726179vps773228.ovh.net sshd[11809]: Failed password for root from 222.186.30.57 port 49812 ssh2 ... |
2020-04-25 12:29:02 |