City: unknown
Region: Guangxi
Country: China
Internet Service Provider: China Mobile
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '117.160.0.0 - 117.191.255.255'
% Abuse contact for '117.160.0.0 - 117.191.255.255' is 'abuse@chinamobile.com'
inetnum: 117.160.0.0 - 117.191.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: ct74-AP
tech-c: HL1318-AP
abuse-c: AC2006-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
mnt-irt: IRT-CHINAMOBILE-CN
last-modified: 2025-12-05T03:45:07Z
source: APNIC
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
remarks: abuse@chinamobile.com was validated on 2025-09-15
mnt-by: MAINT-CN-CMCC
last-modified: 2025-11-18T00:26:27Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
org-type: LIR
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5268-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:14:48Z
source: APNIC
role: ABUSE CHINAMOBILECN
country: ZZ
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
phone: +000000000
e-mail: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
nic-hdl: AC2006-AP
remarks: Generated from irt object IRT-CHINAMOBILE-CN
remarks: abuse@chinamobile.com was validated on 2025-09-15
abuse-mailbox: abuse@chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2025-09-15T02:20:13Z
source: APNIC
role: chinamobile tech
address: 29, Jinrong Ave.,Xicheng district
address: Beijing
country: CN
phone: +86 5268 6688
fax-no: +86 5261 6187
e-mail: hostmaster@chinamobile.com
admin-c: HL1318-AP
tech-c: HL1318-AP
nic-hdl: ct74-AP
notify: hostmaster@chinamobile.com
mnt-by: MAINT-cn-cmcc
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:37:27Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
% Information related to '117.180.0.0/14AS9808'
route: 117.180.0.0/14
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2008-09-04T07:55:15Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.181.145.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42937
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.181.145.40. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025120800 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 08 15:32:06 CST 2025
;; MSG SIZE rcvd: 107Host 40.145.181.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 40.145.181.117.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.156.3.171 | attackspam | scans 20 times in preceeding hours on the ports (in chronological order) 49152 5555 37426 9000 9092 2379 9200 5000 1434 5432 10250 5916 5009 27017 9001 2222 3478 1935 37193 5540 |
2020-07-06 23:17:35 |
| 83.97.20.31 | attackbots | Jul 4 19:12:15 dev postfix/anvil\[17485\]: statistics: max connection rate 1/60s for \(smtp:83.97.20.31\) at Jul 4 19:08:25 ... |
2020-07-06 23:29:08 |
| 146.185.141.95 | attackbots | scans 2 times in preceeding hours on the ports (in chronological order) 7009 7009 |
2020-07-06 23:15:49 |
| 213.32.112.31 | attackbotsspam |
|
2020-07-06 23:04:51 |
| 142.93.105.174 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 3926 30638 |
2020-07-06 23:16:14 |
| 157.230.2.208 | attack | DATE:2020-07-06 14:59:39, IP:157.230.2.208, PORT:ssh SSH brute force auth (docker-dc) |
2020-07-06 23:00:01 |
| 62.210.157.10 | attackspambots | scans 2 times in preceeding hours on the ports (in chronological order) 1080 3128 |
2020-07-06 23:32:13 |
| 66.113.163.81 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 6379 6379 |
2020-07-06 23:31:25 |
| 122.228.19.80 | attack | Jul 6 16:54:53 debian-2gb-nbg1-2 kernel: \[16305901.315155\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.228.19.80 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=30149 PROTO=TCP SPT=61513 DPT=2379 WINDOW=29200 RES=0x00 SYN URGP=0 |
2020-07-06 23:25:07 |
| 103.216.171.78 | attackspambots | probes 4 times on the port 8291 8728 |
2020-07-06 23:19:46 |
| 92.63.197.99 | attackspambots | scans 5 times in preceeding hours on the ports (in chronological order) 3606 3655 3611 3612 3757 resulting in total of 17 scans from 92.63.192.0/20 block. |
2020-07-06 23:26:12 |
| 45.227.254.30 | attack |
|
2020-07-06 23:36:01 |
| 45.158.12.210 | attackspam | Port scan: Attack repeated for 24 hours |
2020-07-06 23:36:28 |
| 51.75.52.127 | attackspam |
|
2020-07-06 23:34:44 |
| 209.239.116.197 | attackspam | Jul 6 15:16:20 web1 sshd\[16451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.239.116.197 user=root Jul 6 15:16:22 web1 sshd\[16451\]: Failed password for root from 209.239.116.197 port 52602 ssh2 Jul 6 15:20:40 web1 sshd\[16649\]: Invalid user ts from 209.239.116.197 Jul 6 15:20:40 web1 sshd\[16649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.239.116.197 Jul 6 15:20:43 web1 sshd\[16649\]: Failed password for invalid user ts from 209.239.116.197 port 52178 ssh2 |
2020-07-06 23:05:05 |