Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Suzhou

Region: Anhui

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '120.192.0.0 - 120.255.255.255'

% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'

inetnum:        120.192.0.0 - 120.255.255.255
netname:        CMNET
descr:          China Mobile Communications Corporation
descr:          Mobile Communications Network Operator in China
descr:          Internet Service Provider in China
country:        CN
org:            ORG-CM1-AP
admin-c:        ct74-AP
tech-c:         HL1318-AP
abuse-c:        AC2006-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CN-CMCC
mnt-routes:     MAINT-CN-CMCC
mnt-irt:        IRT-CHINAMOBILE-CN
last-modified:  2020-07-15T13:10:01Z
source:         APNIC

irt:            IRT-CHINAMOBILE-CN
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail:         abuse@chinamobile.com
abuse-mailbox:  abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
auth:           # Filtered
remarks:        abuse@chinamobile.com was validated on 2026-03-23
mnt-by:         MAINT-CN-CMCC
last-modified:  2026-08-13T06:25:29Z
source:         APNIC

organisation:   ORG-CM1-AP
org-name:       China Mobile Communications Group Co., Ltd
org-type:       LIR
country:        CN
address:        29, Jinrong Ave.
phone:          +86-10-5268-6688
fax-no:         +86-10-5261-6187
e-mail:         hostmaster@chinamobile.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2026-07-31T13:46:41Z
source:         APNIC

role:           ABUSE CHINAMOBILECN
country:        ZZ
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
phone:          +000000000
e-mail:         abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
nic-hdl:        AC2006-AP
remarks:        Generated from irt object IRT-CHINAMOBILE-CN
remarks:        abuse@chinamobile.com was validated on 2026-03-23
abuse-mailbox:  abuse@chinamobile.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-03-23T00:48:02Z
source:         APNIC

role:           chinamobile tech
address:        29, Jinrong Ave.,Xicheng district
address:        Beijing
country:        CN
phone:          +86 5268 6688
fax-no:         +86 5261 6187
e-mail:         hostmaster@chinamobile.com
admin-c:        HL1318-AP
tech-c:         HL1318-AP
nic-hdl:        ct74-AP
notify:         hostmaster@chinamobile.com
mnt-by:         MAINT-cn-cmcc
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:37:27Z
source:         APNIC

person:         haijun li
nic-hdl:        HL1318-AP
e-mail:         hostmaster@chinamobile.com
address:        29,Jinrong Ave, Xicheng district,beijing,100032
phone:          +86 1052686688
fax-no:         +86 10 52616187
country:        CN
mnt-by:         MAINT-CN-CMCC
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:38:38Z
source:         APNIC

% Information related to '120.240.0.0/13AS9808'

route:          120.240.0.0/13
descr:          China Mobile communications corporation
origin:         AS9808
mnt-by:         MAINT-CN-CMCC
last-modified:  2008-11-05T07:45:20Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.242.140.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13049
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.242.140.166.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082900 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 29 15:33:03 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 166.140.242.120.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.140.242.120.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.91.182.42 attack
Feb 11 23:29:45 mout sshd[19740]: Invalid user newrelic from 103.91.182.42 port 48106
2020-02-12 06:40:13
115.159.66.109 attackbotsspam
Feb 11 23:24:20 legacy sshd[6446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.66.109
Feb 11 23:24:21 legacy sshd[6446]: Failed password for invalid user todd from 115.159.66.109 port 37656 ssh2
Feb 11 23:29:03 legacy sshd[6838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.66.109
...
2020-02-12 07:07:48
191.250.216.23 attackspambots
Port probing on unauthorized port 2323
2020-02-12 07:16:01
156.213.22.245 attack
2020-02-1123:28:431j1e1L-0007RK-6e\<=verena@rs-solution.chH=5.37.196.200.dynamic-dsl-ip.omantel.net.om\(localhost\)[5.37.196.200]:58123P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3161id=F7F244171CC8E655898CC57D89692FB3@rs-solution.chT="\;\)Iwouldbedelightedtoreceiveyourreplyorchatwithme."forwhathaveu.dun2day@gmail.comapplegamer107@gmail.com2020-02-1123:28:581j1e1a-0007SK-25\<=verena@rs-solution.chH=\(localhost\)[185.224.101.160]:49737P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=2969id=969325767DA98734E8EDA41CE8454230@rs-solution.chT="\;\)Iwouldbehappytoreceiveyourmailorchatwithme\!"forcarlosmeneces@gmail.comubadzedanz7@gmail.com2020-02-1123:28:191j1e0w-0007Pc-P5\<=verena@rs-solution.chH=\(localhost\)[14.226.242.192]:56033P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3247id=818432616ABE9023FFFAB30BFF0E7302@rs-solution.chT="Iwouldbepleasedtoobtainyourmailandspea
2020-02-12 07:05:35
36.229.216.6 attack
TCP Port Scanning
2020-02-12 07:08:21
122.114.72.155 attack
Feb 11 23:41:37 legacy sshd[7826]: Failed password for root from 122.114.72.155 port 54970 ssh2
Feb 11 23:44:52 legacy sshd[8123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.72.155
Feb 11 23:44:54 legacy sshd[8123]: Failed password for invalid user rolen from 122.114.72.155 port 52620 ssh2
...
2020-02-12 06:54:19
120.133.236.138 attack
Feb 11 23:55:22 dedicated sshd[26709]: Invalid user protect from 120.133.236.138 port 44666
2020-02-12 06:55:47
104.248.65.180 attackbotsspam
Invalid user gts from 104.248.65.180 port 55774
2020-02-12 07:03:10
218.92.0.138 attack
Feb 12 00:08:39 MK-Soft-VM3 sshd[5009]: Failed password for root from 218.92.0.138 port 5965 ssh2
Feb 12 00:08:44 MK-Soft-VM3 sshd[5009]: Failed password for root from 218.92.0.138 port 5965 ssh2
...
2020-02-12 07:10:50
112.186.79.4 attackbots
(sshd) Failed SSH login from 112.186.79.4 (KR/South Korea/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 11 23:28:50 ubnt-55d23 sshd[818]: Invalid user rabbitmq from 112.186.79.4 port 33696
Feb 11 23:28:52 ubnt-55d23 sshd[818]: Failed password for invalid user rabbitmq from 112.186.79.4 port 33696 ssh2
2020-02-12 07:16:56
77.40.65.46 attack
2020-02-11 23:28:49 auth_login authenticator failed for (localhost.localdomain) [77.40.65.46]: 535 Incorrect authentication data (set_id=support@marionet.ru)
2020-02-11 23:28:57 auth_login authenticator failed for (localhost.localdomain) [77.40.65.46]: 535 Incorrect authentication data (set_id=www@marionet.ru)
...
2020-02-12 07:14:49
181.57.153.190 attackbots
2020-02-11T16:08:32.1210061495-001 sshd[8574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.57.153.190
2020-02-11T16:08:32.1147821495-001 sshd[8574]: Invalid user wp from 181.57.153.190 port 41706
2020-02-11T16:08:34.7739841495-001 sshd[8574]: Failed password for invalid user wp from 181.57.153.190 port 41706 ssh2
2020-02-11T17:10:42.5230631495-001 sshd[12295]: Invalid user webmaster from 181.57.153.190 port 38286
2020-02-11T17:10:42.5292541495-001 sshd[12295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.57.153.190
2020-02-11T17:10:42.5230631495-001 sshd[12295]: Invalid user webmaster from 181.57.153.190 port 38286
2020-02-11T17:10:44.2443811495-001 sshd[12295]: Failed password for invalid user webmaster from 181.57.153.190 port 38286 ssh2
2020-02-11T17:13:18.0041131495-001 sshd[12428]: Invalid user orange from 181.57.153.190 port 48727
2020-02-11T17:13:18.0126641495-001 sshd[12428]: pam_unix
...
2020-02-12 06:44:48
222.186.173.238 attackbotsspam
Feb 11 12:29:03 php1 sshd\[5289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
Feb 11 12:29:04 php1 sshd\[5289\]: Failed password for root from 222.186.173.238 port 60614 ssh2
Feb 11 12:29:20 php1 sshd\[5310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
Feb 11 12:29:22 php1 sshd\[5310\]: Failed password for root from 222.186.173.238 port 12448 ssh2
Feb 11 12:29:41 php1 sshd\[5324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-02-12 06:42:38
122.51.231.49 attackspambots
Feb 11 23:42:41 legacy sshd[7931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.231.49
Feb 11 23:42:43 legacy sshd[7931]: Failed password for invalid user pulse from 122.51.231.49 port 53994 ssh2
Feb 11 23:47:15 legacy sshd[8333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.231.49
...
2020-02-12 07:00:37
88.214.26.39 attackbotsspam
200211 17:15:29 [Warning] Access denied for user 'root'@'88.214.26.39' (using password: YES)
200211 17:15:31 [Warning] Access denied for user 'root'@'88.214.26.39' (using password: YES)
200211 17:15:34 [Warning] Access denied for user 'root'@'88.214.26.39' (using password: YES)
...
2020-02-12 06:45:08

Recently Reported IPs

223.78.153.184 119.44.45.92 112.7.84.159 112.23.222.202
103.76.85.135 86.131.212.17 79.161.214.132 74.230.155.145
73.177.17.196 70.229.102.109 65.20.54.143 35.188.250.53
20.150.195.233 194.180.49.37 2606:4700:10::6816:4013 121.229.156.30
61.145.49.189 45.96.87.162 213.177.179.195 31.5.129.161