Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '120.192.0.0 - 120.255.255.255'

% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'

inetnum:        120.192.0.0 - 120.255.255.255
netname:        CMNET
descr:          China Mobile Communications Corporation
descr:          Mobile Communications Network Operator in China
descr:          Internet Service Provider in China
country:        CN
org:            ORG-CM1-AP
admin-c:        ct74-AP
tech-c:         HL1318-AP
abuse-c:        AC2006-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CN-CMCC
mnt-routes:     MAINT-CN-CMCC
mnt-irt:        IRT-CHINAMOBILE-CN
last-modified:  2020-07-15T13:10:01Z
source:         APNIC

irt:            IRT-CHINAMOBILE-CN
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail:         abuse@chinamobile.com
abuse-mailbox:  abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
auth:           # Filtered
remarks:        abuse@chinamobile.com was validated on 2026-09-30
mnt-by:         MAINT-CN-CMCC
last-modified:  2026-09-30T02:37:06Z
source:         APNIC

organisation:   ORG-CM1-AP
org-name:       China Mobile Communications Group Co., Ltd
org-type:       LIR
country:        CN
address:        29, Jinrong Ave.
phone:          +86-10-5268-6688
fax-no:         +86-10-5261-6187
e-mail:         hostmaster@chinamobile.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2026-07-31T13:46:41Z
source:         APNIC

role:           ABUSE CHINAMOBILECN
country:        ZZ
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
phone:          +000000000
e-mail:         abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
nic-hdl:        AC2006-AP
remarks:        Generated from irt object IRT-CHINAMOBILE-CN
remarks:        abuse@chinamobile.com was validated on 2026-09-30
abuse-mailbox:  abuse@chinamobile.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-09-30T02:37:41Z
source:         APNIC

role:           chinamobile tech
address:        29, Jinrong Ave.,Xicheng district
address:        Beijing
country:        CN
phone:          +86 5268 6688
fax-no:         +86 5261 6187
e-mail:         hostmaster@chinamobile.com
admin-c:        HL1318-AP
tech-c:         HL1318-AP
nic-hdl:        ct74-AP
notify:         hostmaster@chinamobile.com
mnt-by:         MAINT-cn-cmcc
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:37:27Z
source:         APNIC

person:         haijun li
nic-hdl:        HL1318-AP
e-mail:         hostmaster@chinamobile.com
address:        29,Jinrong Ave, Xicheng district,beijing,100032
phone:          +86 1052686688
fax-no:         +86 10 52616187
country:        CN
mnt-by:         MAINT-CN-CMCC
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:38:38Z
source:         APNIC

% Information related to '120.240.0.0/13AS9808'

route:          120.240.0.0/13
descr:          China Mobile communications corporation
origin:         AS9808
mnt-by:         MAINT-CN-CMCC
last-modified:  2008-11-05T07:45:20Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.242.140.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36334
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.242.140.201.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026101302 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 07:31:25 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 201.140.242.120.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 201.140.242.120.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
179.162.214.23 attack
Automatic report - Port Scan Attack
2020-07-28 23:51:42
106.54.236.220 attackbotsspam
Jul 28 20:03:22 itv-usvr-01 sshd[14202]: Invalid user dping from 106.54.236.220
Jul 28 20:03:22 itv-usvr-01 sshd[14202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.236.220
Jul 28 20:03:22 itv-usvr-01 sshd[14202]: Invalid user dping from 106.54.236.220
Jul 28 20:03:24 itv-usvr-01 sshd[14202]: Failed password for invalid user dping from 106.54.236.220 port 56688 ssh2
2020-07-28 23:47:27
5.136.111.240 attackbots
Port probing on unauthorized port 8080
2020-07-28 23:46:40
96.18.126.239 attackbots
Jul 28 13:04:04 lvps5-35-247-183 sshd[9228]: Invalid user admin from 96.18.126.239
Jul 28 13:04:05 lvps5-35-247-183 sshd[9228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-18-126-239.cpe.sparklight.net 
Jul 28 13:04:07 lvps5-35-247-183 sshd[9228]: Failed password for invalid user admin from 96.18.126.239 port 38885 ssh2
Jul 28 13:04:07 lvps5-35-247-183 sshd[9228]: Received disconnect from 96.18.126.239: 11: Bye Bye [preauth]
Jul 28 13:04:09 lvps5-35-247-183 sshd[9230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96-18-126-239.cpe.sparklight.net  user=r.r
Jul 28 13:04:12 lvps5-35-247-183 sshd[9230]: Failed password for r.r from 96.18.126.239 port 39083 ssh2
Jul 28 13:04:12 lvps5-35-247-183 sshd[9230]: Received disconnect from 96.18.126.239: 11: Bye Bye [preauth]
Jul 28 13:04:14 lvps5-35-247-183 sshd[9232]: Invalid user admin from 96.18.126.239
Jul 28 13:04:14 lvps5-35-247-183 sshd[........
-------------------------------
2020-07-28 23:29:05
92.118.160.57 attackbotsspam
 TCP (SYN) 92.118.160.57:61729 -> port 10443, len 44
2020-07-28 23:28:40
218.92.0.248 attackbotsspam
2020-07-28T15:22:12.574039abusebot-4.cloudsearch.cf sshd[23432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.248  user=root
2020-07-28T15:22:15.313085abusebot-4.cloudsearch.cf sshd[23432]: Failed password for root from 218.92.0.248 port 45474 ssh2
2020-07-28T15:22:19.240102abusebot-4.cloudsearch.cf sshd[23432]: Failed password for root from 218.92.0.248 port 45474 ssh2
2020-07-28T15:22:12.574039abusebot-4.cloudsearch.cf sshd[23432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.248  user=root
2020-07-28T15:22:15.313085abusebot-4.cloudsearch.cf sshd[23432]: Failed password for root from 218.92.0.248 port 45474 ssh2
2020-07-28T15:22:19.240102abusebot-4.cloudsearch.cf sshd[23432]: Failed password for root from 218.92.0.248 port 45474 ssh2
2020-07-28T15:22:12.574039abusebot-4.cloudsearch.cf sshd[23432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho
...
2020-07-28 23:27:28
14.169.139.82 attack
xmlrpc attack
2020-07-28 23:20:30
180.151.56.119 attackbots
SSH Brute-Force. Ports scanning.
2020-07-29 00:00:21
218.92.0.190 attackspambots
Jul 28 17:42:44 dcd-gentoo sshd[2536]: User root from 218.92.0.190 not allowed because none of user's groups are listed in AllowGroups
Jul 28 17:42:46 dcd-gentoo sshd[2536]: error: PAM: Authentication failure for illegal user root from 218.92.0.190
Jul 28 17:42:46 dcd-gentoo sshd[2536]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.190 port 10619 ssh2
...
2020-07-28 23:46:55
94.102.51.95 attack
07/28/2020-11:04:36.732401 94.102.51.95 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-28 23:24:43
220.134.178.219 attackbots
Portscan detected
2020-07-28 23:30:44
168.227.99.10 attackbots
Jul 28 14:05:13 vpn01 sshd[31681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.227.99.10
Jul 28 14:05:15 vpn01 sshd[31681]: Failed password for invalid user xywei from 168.227.99.10 port 37288 ssh2
...
2020-07-28 23:40:55
64.227.36.108 attackbotsspam
Jul 28 11:39:55 vm0 sshd[29382]: Failed password for root from 64.227.36.108 port 46018 ssh2
Jul 28 15:39:57 vm0 sshd[351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.36.108
...
2020-07-28 23:50:45
122.14.228.229 attackbots
Jul 28 16:08:34 santamaria sshd\[12552\]: Invalid user tflaisch from 122.14.228.229
Jul 28 16:08:34 santamaria sshd\[12552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.228.229
Jul 28 16:08:35 santamaria sshd\[12552\]: Failed password for invalid user tflaisch from 122.14.228.229 port 55134 ssh2
...
2020-07-28 23:39:04
84.17.46.203 attackspam
Fail2Ban Ban Triggered
HTTP Exploit Attempt
2020-07-28 23:43:48

Recently Reported IPs

183.212.69.95 120.230.23.201 115.55.17.94 115.53.100.241
112.24.68.97 112.22.116.9 217.129.202.117 217.14.173.187
216.201.183.36 213.177.86.122 212.48.91.118 39.148.91.151
223.91.114.0 223.106.131.195 183.199.86.251 183.199.243.193
180.233.80.20 138.2.225.106 120.231.37.124 120.231.110.228