Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Shaanxi

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '111.0.0.0 - 111.63.255.255'

% Abuse contact for '111.0.0.0 - 111.63.255.255' is 'abuse@chinamobile.com'

inetnum:        111.0.0.0 - 111.63.255.255
netname:        CMNET
descr:          China Mobile Communications Corporation
descr:          Mobile Communications Network Operator in China
descr:          Internet Service Provider in China
country:        CN
org:            ORG-CM1-AP
admin-c:        ct74-AP
tech-c:         HL1318-AP
abuse-c:        AC2006-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CN-CMCC
mnt-routes:     MAINT-CN-CMCC
mnt-irt:        IRT-CHINAMOBILE-CN
last-modified:  2020-07-15T13:10:04Z
source:         APNIC

irt:            IRT-CHINAMOBILE-CN
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail:         abuse@chinamobile.com
abuse-mailbox:  abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
auth:           # Filtered
remarks:        abuse@chinamobile.com was validated on 2026-03-23
mnt-by:         MAINT-CN-CMCC
last-modified:  2026-08-13T06:25:29Z
source:         APNIC

organisation:   ORG-CM1-AP
org-name:       China Mobile Communications Group Co., Ltd
org-type:       LIR
country:        CN
address:        29, Jinrong Ave.
phone:          +86-10-5268-6688
fax-no:         +86-10-5261-6187
e-mail:         hostmaster@chinamobile.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2026-07-31T13:46:41Z
source:         APNIC

role:           ABUSE CHINAMOBILECN
country:        ZZ
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
phone:          +000000000
e-mail:         abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
nic-hdl:        AC2006-AP
remarks:        Generated from irt object IRT-CHINAMOBILE-CN
remarks:        abuse@chinamobile.com was validated on 2026-03-23
abuse-mailbox:  abuse@chinamobile.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-03-23T00:48:02Z
source:         APNIC

role:           chinamobile tech
address:        29, Jinrong Ave.,Xicheng district
address:        Beijing
country:        CN
phone:          +86 5268 6688
fax-no:         +86 5261 6187
e-mail:         hostmaster@chinamobile.com
admin-c:        HL1318-AP
tech-c:         HL1318-AP
nic-hdl:        ct74-AP
notify:         hostmaster@chinamobile.com
mnt-by:         MAINT-cn-cmcc
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:37:27Z
source:         APNIC

person:         haijun li
nic-hdl:        HL1318-AP
e-mail:         hostmaster@chinamobile.com
address:        29,Jinrong Ave, Xicheng district,beijing,100032
phone:          +86 1052686688
fax-no:         +86 10 52616187
country:        CN
mnt-by:         MAINT-CN-CMCC
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:38:38Z
source:         APNIC

% Information related to '111.0.0.0/10AS9808'

route:          111.0.0.0/10
descr:          China Mobile communications corporation
origin:         AS9808
mnt-by:         MAINT-CN-CMCC
last-modified:  2012-02-15T08:47:26Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.18.194.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.18.194.5.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026083101 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 01 02:30:35 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 5.194.18.111.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.194.18.111.in-addr.arpa: NXDOMAIN
Related IP info:
111.18.194.9
111.18.194.151
111.18.194.17
111.18.194.124
111.18.194.6
111.18.194.254
111.18.194.127
111.18.194.75
111.18.194.186
111.18.194.176
111.18.194.2
111.18.194.84
111.18.194.177
111.18.194.147
111.18.194.213
111.18.194.91
111.18.194.89
111.18.194.92
111.18.194.90
111.18.194.146
111.18.194.241
111.18.194.221
111.18.194.64
111.18.194.67
111.18.194.232
111.18.194.25
111.18.194.129
111.18.194.242
111.18.194.240
111.18.194.172
111.18.194.215
111.18.194.41
111.18.194.191
111.18.194.34
111.18.194.234
111.18.194.190
111.18.194.233
111.18.194.173
111.18.194.194
111.18.194.54
111.18.194.46
111.18.194.107
111.18.194.238
111.18.194.47
111.18.194.199
111.18.194.197
111.18.194.95
111.18.194.162
111.18.194.193
111.18.194.29
111.18.194.161
111.18.194.100
111.18.194.225
111.18.194.114
111.18.194.252
111.18.194.73
111.18.194.121
111.18.194.43
111.18.194.131
111.18.194.26
111.18.194.198
111.18.194.218
111.18.194.157
111.18.194.59
111.18.194.133
111.18.194.175
111.18.194.224
111.18.194.80
111.18.194.125
111.18.194.49
111.18.194.154
111.18.194.214
111.18.194.106
111.18.194.22
111.18.194.253
111.18.194.74
111.18.194.216
111.18.194.130
111.18.194.222
111.18.194.158
111.18.194.58
111.18.194.166
111.18.194.87
111.18.194.5
111.18.194.209
111.18.194.250
111.18.194.55
111.18.194.245
111.18.194.149
111.18.194.105
111.18.194.53
111.18.194.156
111.18.194.163
111.18.194.96
111.18.194.63
111.18.194.212
111.18.194.169
111.18.194.159
111.18.194.21
111.18.194.65
111.18.194.217
111.18.194.72
111.18.194.139
111.18.194.120
111.18.194.116
111.18.194.94
111.18.194.152
111.18.194.204
111.18.194.178
111.18.194.28
111.18.194.164
111.18.194.39
111.18.194.112
111.18.194.126
111.18.194.88
111.18.194.195
111.18.194.244
111.18.194.150
111.18.194.44
111.18.194.183
111.18.194.7
111.18.194.180
111.18.194.184
111.18.194.239
111.18.194.52
111.18.194.168
111.18.194.230
111.18.194.196
111.18.194.236
111.18.194.69
111.18.194.56
111.18.194.135
111.18.194.140
111.18.194.134
111.18.194.85
111.18.194.123
111.18.194.10
111.18.194.246
111.18.194.231
111.18.194.206
111.18.194.48
111.18.194.118
111.18.194.93
111.18.194.181
111.18.194.57
111.18.194.66
111.18.194.102
111.18.194.122
111.18.194.50
111.18.194.24
111.18.194.142
111.18.194.235
111.18.194.110
111.18.194.109
111.18.194.207
111.18.194.165
111.18.194.32
111.18.194.4
111.18.194.40
111.18.194.14
111.18.194.132
111.18.194.35
111.18.194.201
111.18.194.11
111.18.194.171
111.18.194.113
111.18.194.15
111.18.194.185
111.18.194.62
111.18.194.229
111.18.194.36
111.18.194.170
111.18.194.128
111.18.194.98
111.18.194.61
111.18.194.192
111.18.194.243
111.18.194.174
111.18.194.143
111.18.194.79
111.18.194.187
111.18.194.86
111.18.194.119
111.18.194.136
111.18.194.219
111.18.194.60
111.18.194.12
111.18.194.1
111.18.194.251
111.18.194.155
111.18.194.117
111.18.194.31
111.18.194.228
111.18.194.200
111.18.194.182
111.18.194.248
111.18.194.37
111.18.194.16
111.18.194.227
111.18.194.18
111.18.194.38
111.18.194.70
111.18.194.237
111.18.194.97
111.18.194.99
111.18.194.223
111.18.194.33
111.18.194.153
111.18.194.45
111.18.194.202
111.18.194.42
111.18.194.3
111.18.194.13
111.18.194.30
111.18.194.83
111.18.194.101
111.18.194.189
111.18.194.8
111.18.194.78
111.18.194.220
111.18.194.226
111.18.194.148
111.18.194.205
111.18.194.160
111.18.194.23
111.18.194.111
111.18.194.71
111.18.194.210
111.18.194.51
111.18.194.108
111.18.194.211
111.18.194.76
111.18.194.208
111.18.194.68
111.18.194.188
111.18.194.247
111.18.194.167
111.18.194.249
111.18.194.82
111.18.194.103
111.18.194.203
111.18.194.179
111.18.194.138
111.18.194.115
111.18.194.81
111.18.194.137
111.18.194.27
111.18.194.20
111.18.194.104
111.18.194.77
111.18.194.141
111.18.194.145
111.18.194.144
111.18.194.19
Related comments:
IP Type Details Datetime
103.76.24.202 attackbots 
1587872922 - 04/26/2020 05:48:42 Host: 103.76.24.202/103.76.24.202 Port: 445 TCP Blocked
 2020-04-26 18:21:24
123.206.38.253 attackspam 
(sshd) Failed SSH login from 123.206.38.253 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 26 09:52:51 s1 sshd[12193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.38.253  user=root
Apr 26 09:52:53 s1 sshd[12193]: Failed password for root from 123.206.38.253 port 57394 ssh2
Apr 26 09:58:48 s1 sshd[12307]: Invalid user glenn from 123.206.38.253 port 35460
Apr 26 09:58:50 s1 sshd[12307]: Failed password for invalid user glenn from 123.206.38.253 port 35460 ssh2
Apr 26 10:02:20 s1 sshd[12440]: Invalid user user from 123.206.38.253 port 45268
 2020-04-26 18:12:25
167.172.114.165 attackbotsspam 
Apr 26 11:45:36 PorscheCustomer sshd[14056]: Failed password for root from 167.172.114.165 port 59208 ssh2
Apr 26 11:47:14 PorscheCustomer sshd[14187]: Failed password for root from 167.172.114.165 port 37972 ssh2
Apr 26 11:50:05 PorscheCustomer sshd[14375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.114.165
...
 2020-04-26 18:22:56
159.89.121.79 attackbots 
C2,WP GET /wp-login.php
 2020-04-26 18:37:57
182.75.248.254 attack 
Apr 26 12:23:09 mout sshd[13503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254  user=root
Apr 26 12:23:11 mout sshd[13503]: Failed password for root from 182.75.248.254 port 29531 ssh2
 2020-04-26 18:39:37
2a00:1098:84::4 attack 
Apr 26 10:22:31 l03 sshd[18461]: Invalid user xxl from 2a00:1098:84::4 port 34464
...
 2020-04-26 18:35:39
92.118.189.19 attack 
2020-04-25 UTC: (45x) - Admin@123,abbey,administrator,atlas,awanish,blake,botnet,castis,core,ec,egghead,emcontexto,full,git,httpd,jake,ji,mysql,nagiosuser,nginx,nico,odroid,openvpn_as,postgres,rinocente,root(4x),secure,sftp,spotlight,sysadmin,tarsys,teamspeak(2x),test,tomca,travis,uno,vonni,vpnguardbot,weblogic,wildfly,y
 2020-04-26 18:38:23
182.61.36.56 attack 
(sshd) Failed SSH login from 182.61.36.56 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 26 12:50:48 s1 sshd[17483]: Invalid user sysop from 182.61.36.56 port 39026
Apr 26 12:50:51 s1 sshd[17483]: Failed password for invalid user sysop from 182.61.36.56 port 39026 ssh2
Apr 26 12:53:34 s1 sshd[17532]: Invalid user cups from 182.61.36.56 port 32770
Apr 26 12:53:36 s1 sshd[17532]: Failed password for invalid user cups from 182.61.36.56 port 32770 ssh2
Apr 26 12:55:42 s1 sshd[17577]: Invalid user kjj from 182.61.36.56 port 52916
 2020-04-26 18:36:14
140.143.226.19 attack 
Invalid user postgres from 140.143.226.19 port 47596
 2020-04-26 18:07:06
106.12.48.217 attackbotsspam 
Jan  3 01:33:40 ms-srv sshd[30325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217
Jan  3 01:33:42 ms-srv sshd[30325]: Failed password for invalid user trn from 106.12.48.217 port 52526 ssh2
 2020-04-26 18:09:23
222.186.173.201 attackspam 
2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201  user=root
2020-04-26T10:17:51.709816abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2
2020-04-26T10:17:56.236078abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2
2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201  user=root
2020-04-26T10:17:51.709816abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2
2020-04-26T10:17:56.236078abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2
2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 
...
 2020-04-26 18:18:55
45.143.220.216 attackbotsspam 
[2020-04-26 05:51:54] NOTICE[1170][C-00005c12] chan_sip.c: Call from '' (45.143.220.216:60169) to extension '+46406820532' rejected because extension not found in context 'public'.
[2020-04-26 05:51:54] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-26T05:51:54.779-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+46406820532",SessionID="0x7f6c080ab528",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.216/60169",ACLName="no_extension_match"
[2020-04-26 05:51:58] NOTICE[1170][C-00005c14] chan_sip.c: Call from '' (45.143.220.216:51237) to extension '0046113232930' rejected because extension not found in context 'public'.
[2020-04-26 05:51:58] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-26T05:51:58.831-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046113232930",SessionID="0x7f6c08064098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.
...
 2020-04-26 18:03:26
106.37.72.234 attackspambots 
Apr 26 13:26:35 pkdns2 sshd\[23036\]: Invalid user lby from 106.37.72.234Apr 26 13:26:37 pkdns2 sshd\[23036\]: Failed password for invalid user lby from 106.37.72.234 port 53804 ssh2Apr 26 13:29:41 pkdns2 sshd\[23142\]: Invalid user leslie from 106.37.72.234Apr 26 13:29:43 pkdns2 sshd\[23142\]: Failed password for invalid user leslie from 106.37.72.234 port 41576 ssh2Apr 26 13:32:52 pkdns2 sshd\[23277\]: Failed password for root from 106.37.72.234 port 57578 ssh2Apr 26 13:35:53 pkdns2 sshd\[23415\]: Invalid user soledad from 106.37.72.234
...
 2020-04-26 18:43:09
82.213.229.176 attackbotsspam 
37215/tcp 23/tcp...
[2020-04-08/25]5pkt,2pt.(tcp)
 2020-04-26 18:08:09
45.56.137.137 attack 
[2020-04-26 05:58:36] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.56.137.137:51946' - Wrong password
[2020-04-26 05:58:36] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T05:58:36.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2313",SessionID="0x7f6c086f7488",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.137/51946",Challenge="29dd902f",ReceivedChallenge="29dd902f",ReceivedHash="a09b21b7c8258fe81d471319d620d0b3"
[2020-04-26 05:58:37] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.56.137.137:52757' - Wrong password
[2020-04-26 05:58:37] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T05:58:37.459-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2350",SessionID="0x7f6c08358818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.137
...
 2020-04-26 18:15:57

Recently Reported IPs

223.67.113.219 222.133.75.145 125.46.170.219 120.229.47.203
115.60.84.121 115.60.43.147 115.59.42.37 112.87.36.156
101.73.166.161 101.26.28.98 101.23.161.55 60.222.193.186
60.13.2.96 58.255.236.156 42.239.131.255 182.89.114.156
121.27.190.18 120.239.27.188 117.150.12.23 116.77.8.44