城市(city): Guangzhou
省份(region): Guangdong
国家(country): China
运营商(isp): China Mobile
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '120.192.0.0 - 120.255.255.255'
% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'
inetnum: 120.192.0.0 - 120.255.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: ct74-AP
tech-c: HL1318-AP
abuse-c: AC2006-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
mnt-irt: IRT-CHINAMOBILE-CN
last-modified: 2020-07-15T13:10:01Z
source: APNIC
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
remarks: abuse@chinamobile.com was validated on 2026-09-30
mnt-by: MAINT-CN-CMCC
last-modified: 2026-09-30T02:37:06Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile Communications Group Co., Ltd
org-type: LIR
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5268-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2026-07-31T13:46:41Z
source: APNIC
role: ABUSE CHINAMOBILECN
country: ZZ
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
phone: +000000000
e-mail: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
nic-hdl: AC2006-AP
remarks: Generated from irt object IRT-CHINAMOBILE-CN
remarks: abuse@chinamobile.com was validated on 2026-09-30
abuse-mailbox: abuse@chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2026-09-30T02:37:41Z
source: APNIC
role: chinamobile tech
address: 29, Jinrong Ave.,Xicheng district
address: Beijing
country: CN
phone: +86 5268 6688
fax-no: +86 5261 6187
e-mail: hostmaster@chinamobile.com
admin-c: HL1318-AP
tech-c: HL1318-AP
nic-hdl: ct74-AP
notify: hostmaster@chinamobile.com
mnt-by: MAINT-cn-cmcc
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:37:27Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
% Information related to '120.224.0.0/12AS9808'
route: 120.224.0.0/12
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2008-11-05T07:40:19Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2); <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.230.121.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43023
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.230.121.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101201 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 13 13:02:49 CST 2026
;; MSG SIZE rcvd: 106Host 2.121.230.120.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.121.230.120.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 176.193.149.42 | attackbotsspam | Sat, 20 Jul 2019 21:53:45 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:16:53 |
| 49.88.112.69 | attackbots | Failed password for root from 49.88.112.69 port 21166 ssh2 Failed password for root from 49.88.112.69 port 21166 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root Failed password for root from 49.88.112.69 port 49369 ssh2 Failed password for root from 49.88.112.69 port 49369 ssh2 |
2019-07-21 15:42:08 |
| 46.166.151.47 | attack | \[2019-07-21 03:37:51\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-21T03:37:51.195-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001146313113291",SessionID="0x7f06f8009f28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/63279",ACLName="no_extension_match" \[2019-07-21 03:40:02\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-21T03:40:02.710-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001146406829453",SessionID="0x7f06f80825f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/57762",ACLName="no_extension_match" \[2019-07-21 03:40:43\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-21T03:40:43.152-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00246363302946",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/61507",ACLName="no_e |
2019-07-21 15:51:43 |
| 27.50.24.83 | attackbots | Jul 21 09:40:42 bouncer sshd\[16282\]: Invalid user cacti from 27.50.24.83 port 55026 Jul 21 09:40:42 bouncer sshd\[16282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.50.24.83 Jul 21 09:40:43 bouncer sshd\[16282\]: Failed password for invalid user cacti from 27.50.24.83 port 55026 ssh2 ... |
2019-07-21 15:52:20 |
| 181.44.4.74 | attackspambots | 60001/tcp [2019-07-21]1pkt |
2019-07-21 15:59:34 |
| 188.120.241.104 | attackspambots | Jul 19 10:20:38 nbi10516-7 sshd[4981]: Did not receive identification string from 188.120.241.104 port 40374 Jul 19 10:20:39 nbi10516-7 sshd[4982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.120.241.104 user=r.r Jul 19 10:20:40 nbi10516-7 sshd[4982]: Failed password for r.r from 188.120.241.104 port 40390 ssh2 Jul 19 10:20:40 nbi10516-7 sshd[4982]: error: Received disconnect from 188.120.241.104 port 40390:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jul 19 10:20:40 nbi10516-7 sshd[4982]: Disconnected from 188.120.241.104 port 40390 [preauth] Jul 19 10:20:41 nbi10516-7 sshd[5003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.120.241.104 user=r.r Jul 19 10:20:43 nbi10516-7 sshd[5003]: Failed password for r.r from 188.120.241.104 port 40628 ssh2 Jul 19 10:20:43 nbi10516-7 sshd[5003]: error: Received disconnect from 188.120.241.104 port 40628:3: com.jcraft.jsch.JSchEx........ ------------------------------- |
2019-07-21 15:25:45 |
| 51.83.15.30 | attackspam | Jul 21 13:09:34 vibhu-HP-Z238-Microtower-Workstation sshd\[16635\]: Invalid user mc from 51.83.15.30 Jul 21 13:09:34 vibhu-HP-Z238-Microtower-Workstation sshd\[16635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.15.30 Jul 21 13:09:36 vibhu-HP-Z238-Microtower-Workstation sshd\[16635\]: Failed password for invalid user mc from 51.83.15.30 port 58576 ssh2 Jul 21 13:14:03 vibhu-HP-Z238-Microtower-Workstation sshd\[16761\]: Invalid user mariadb from 51.83.15.30 Jul 21 13:14:03 vibhu-HP-Z238-Microtower-Workstation sshd\[16761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.15.30 ... |
2019-07-21 15:53:51 |
| 77.88.87.74 | attackspambots | xmlrpc attack |
2019-07-21 15:55:33 |
| 106.12.125.139 | attackbots | Jul 21 04:16:33 TORMINT sshd\[7553\]: Invalid user de from 106.12.125.139 Jul 21 04:16:33 TORMINT sshd\[7553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.139 Jul 21 04:16:35 TORMINT sshd\[7553\]: Failed password for invalid user de from 106.12.125.139 port 44582 ssh2 ... |
2019-07-21 16:22:10 |
| 42.116.116.188 | attackbotsspam | Sat, 20 Jul 2019 21:53:44 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:21:51 |
| 113.176.44.50 | attackspambots | Sat, 20 Jul 2019 21:53:42 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:28:28 |
| 138.197.103.160 | attackbots | 2019-07-21T14:40:21.070645enmeeting.mahidol.ac.th sshd\[2469\]: Invalid user ti from 138.197.103.160 port 43264 2019-07-21T14:40:21.084991enmeeting.mahidol.ac.th sshd\[2469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.103.160 2019-07-21T14:40:22.985077enmeeting.mahidol.ac.th sshd\[2469\]: Failed password for invalid user ti from 138.197.103.160 port 43264 ssh2 ... |
2019-07-21 16:04:30 |
| 180.244.223.47 | attack | 8728/tcp 22/tcp 8291/tcp [2019-07-21]3pkt |
2019-07-21 16:08:30 |
| 181.110.240.194 | attackbots | 2019-07-21T07:40:37.371970abusebot-6.cloudsearch.cf sshd\[23599\]: Invalid user hadoop from 181.110.240.194 port 50850 |
2019-07-21 15:59:02 |
| 125.224.242.13 | attackbots | 37215/tcp [2019-07-21]1pkt |
2019-07-21 16:03:07 |