Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: China Mobile

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '120.192.0.0 - 120.255.255.255'

% Abuse contact for '120.192.0.0 - 120.255.255.255' is 'abuse@chinamobile.com'

inetnum:        120.192.0.0 - 120.255.255.255
netname:        CMNET
descr:          China Mobile Communications Corporation
descr:          Mobile Communications Network Operator in China
descr:          Internet Service Provider in China
country:        CN
org:            ORG-CM1-AP
admin-c:        ct74-AP
tech-c:         HL1318-AP
abuse-c:        AC2006-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CN-CMCC
mnt-routes:     MAINT-CN-CMCC
mnt-irt:        IRT-CHINAMOBILE-CN
last-modified:  2020-07-15T13:10:01Z
source:         APNIC

irt:            IRT-CHINAMOBILE-CN
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail:         abuse@chinamobile.com
abuse-mailbox:  abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
auth:           # Filtered
remarks:        abuse@chinamobile.com was validated on 2026-03-23
mnt-by:         MAINT-CN-CMCC
last-modified:  2026-08-13T06:25:29Z
source:         APNIC

organisation:   ORG-CM1-AP
org-name:       China Mobile Communications Group Co., Ltd
org-type:       LIR
country:        CN
address:        29, Jinrong Ave.
phone:          +86-10-5268-6688
fax-no:         +86-10-5261-6187
e-mail:         hostmaster@chinamobile.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2026-07-31T13:46:41Z
source:         APNIC

role:           ABUSE CHINAMOBILECN
country:        ZZ
address:        China Mobile Communications Corporation
address:        29, Jinrong Ave., Xicheng District, Beijing, 100032
phone:          +000000000
e-mail:         abuse@chinamobile.com
admin-c:        CT74-AP
tech-c:         CT74-AP
nic-hdl:        AC2006-AP
remarks:        Generated from irt object IRT-CHINAMOBILE-CN
remarks:        abuse@chinamobile.com was validated on 2026-03-23
abuse-mailbox:  abuse@chinamobile.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-03-23T00:48:02Z
source:         APNIC

role:           chinamobile tech
address:        29, Jinrong Ave.,Xicheng district
address:        Beijing
country:        CN
phone:          +86 5268 6688
fax-no:         +86 5261 6187
e-mail:         hostmaster@chinamobile.com
admin-c:        HL1318-AP
tech-c:         HL1318-AP
nic-hdl:        ct74-AP
notify:         hostmaster@chinamobile.com
mnt-by:         MAINT-cn-cmcc
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:37:27Z
source:         APNIC

person:         haijun li
nic-hdl:        HL1318-AP
e-mail:         hostmaster@chinamobile.com
address:        29,Jinrong Ave, Xicheng district,beijing,100032
phone:          +86 1052686688
fax-no:         +86 10 52616187
country:        CN
mnt-by:         MAINT-CN-CMCC
abuse-mailbox:  abuse@chinamobile.com
last-modified:  2016-11-29T09:38:38Z
source:         APNIC

% Information related to '120.240.0.0/13AS9808'

route:          120.240.0.0/13
descr:          China Mobile communications corporation
origin:         AS9808
mnt-by:         MAINT-CN-CMCC
last-modified:  2008-11-05T07:45:20Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.244.6.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.244.6.116.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026083001 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 13:02:53 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 116.6.244.120.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.6.244.120.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.172 attackbots
Dec 10 12:06:02 localhost sshd\[31432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172  user=root
Dec 10 12:06:03 localhost sshd\[31432\]: Failed password for root from 112.85.42.172 port 50751 ssh2
Dec 10 12:06:07 localhost sshd\[31432\]: Failed password for root from 112.85.42.172 port 50751 ssh2
2019-12-10 19:22:37
223.73.150.252 attack
REQUESTED PAGE: /xmlrpc.php
2019-12-10 19:28:32
66.249.155.244 attack
Dec 10 11:43:02 MK-Soft-VM5 sshd[868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.244 
Dec 10 11:43:04 MK-Soft-VM5 sshd[868]: Failed password for invalid user 12345 from 66.249.155.244 port 47776 ssh2
...
2019-12-10 19:30:06
14.116.253.142 attackbots
Dec 10 01:12:12 web9 sshd\[16934\]: Invalid user shirasaka from 14.116.253.142
Dec 10 01:12:12 web9 sshd\[16934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.253.142
Dec 10 01:12:13 web9 sshd\[16934\]: Failed password for invalid user shirasaka from 14.116.253.142 port 56235 ssh2
Dec 10 01:18:11 web9 sshd\[17835\]: Invalid user schloeman from 14.116.253.142
Dec 10 01:18:11 web9 sshd\[17835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.253.142
2019-12-10 19:24:47
218.92.0.148 attackspam
Dec 10 07:45:03 firewall sshd[6879]: Failed password for root from 218.92.0.148 port 28051 ssh2
Dec 10 07:45:07 firewall sshd[6879]: Failed password for root from 218.92.0.148 port 28051 ssh2
Dec 10 07:45:10 firewall sshd[6879]: Failed password for root from 218.92.0.148 port 28051 ssh2
...
2019-12-10 18:52:45
211.147.216.19 attackspam
Dec 10 11:47:22 ns381471 sshd[29913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19
Dec 10 11:47:25 ns381471 sshd[29913]: Failed password for invalid user activewear from 211.147.216.19 port 59354 ssh2
2019-12-10 19:08:18
106.54.234.212 attackspambots
Port scan detected on ports: 1433[TCP], 1433[TCP], 1433[TCP]
2019-12-10 19:03:54
119.57.103.38 attackbotsspam
2019-12-10T10:03:01.928342struts4.enskede.local sshd\[6746\]: Invalid user debelen from 119.57.103.38 port 35368
2019-12-10T10:03:01.934867struts4.enskede.local sshd\[6746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.103.38
2019-12-10T10:03:04.003213struts4.enskede.local sshd\[6746\]: Failed password for invalid user debelen from 119.57.103.38 port 35368 ssh2
2019-12-10T10:09:38.790222struts4.enskede.local sshd\[6771\]: Invalid user hamlen from 119.57.103.38 port 33286
2019-12-10T10:09:38.798627struts4.enskede.local sshd\[6771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.103.38
...
2019-12-10 18:52:32
112.85.42.175 attack
Dec 10 12:01:28 MK-Soft-VM5 sshd[1135]: Failed password for root from 112.85.42.175 port 36557 ssh2
Dec 10 12:01:33 MK-Soft-VM5 sshd[1135]: Failed password for root from 112.85.42.175 port 36557 ssh2
...
2019-12-10 19:06:03
177.84.197.14 attackspambots
Dec 10 11:45:30 microserver sshd[4728]: Invalid user test from 177.84.197.14 port 34734
Dec 10 11:45:30 microserver sshd[4728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.84.197.14
Dec 10 11:45:32 microserver sshd[4728]: Failed password for invalid user test from 177.84.197.14 port 34734 ssh2
Dec 10 11:45:44 microserver sshd[4747]: Invalid user sakura from 177.84.197.14 port 35922
Dec 10 11:45:44 microserver sshd[4747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.84.197.14
Dec 10 11:57:08 microserver sshd[6985]: Invalid user arita from 177.84.197.14 port 60346
Dec 10 11:57:08 microserver sshd[6985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.84.197.14
Dec 10 11:57:10 microserver sshd[6985]: Failed password for invalid user arita from 177.84.197.14 port 60346 ssh2
Dec 10 11:57:21 microserver sshd[7005]: Invalid user oracle from 177.84.197.14 port 33128
Dec 10 11:57:2
2019-12-10 19:11:57
185.176.27.178 attack
Dec 10 11:32:42 mc1 kernel: \[132803.728685\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=59555 PROTO=TCP SPT=58444 DPT=51915 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 10 11:33:17 mc1 kernel: \[132838.349793\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=56591 PROTO=TCP SPT=58444 DPT=16417 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 10 11:33:50 mc1 kernel: \[132871.867826\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=13385 PROTO=TCP SPT=58444 DPT=58984 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-12-10 18:53:37
106.13.17.8 attackspam
Dec 10 00:45:17 web1 sshd\[8919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.17.8  user=mysql
Dec 10 00:45:19 web1 sshd\[8919\]: Failed password for mysql from 106.13.17.8 port 46942 ssh2
Dec 10 00:51:21 web1 sshd\[9580\]: Invalid user test from 106.13.17.8
Dec 10 00:51:21 web1 sshd\[9580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.17.8
Dec 10 00:51:24 web1 sshd\[9580\]: Failed password for invalid user test from 106.13.17.8 port 47254 ssh2
2019-12-10 18:55:36
222.186.175.154 attack
2019-12-09 UTC: 2x - (2x)
2019-12-10 18:55:21
83.97.24.10 attack
Dec 10 09:14:38 sip sshd[21023]: Failed password for root from 83.97.24.10 port 44940 ssh2
Dec 10 09:23:37 sip sshd[21149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.97.24.10
Dec 10 09:23:39 sip sshd[21149]: Failed password for invalid user elvin from 83.97.24.10 port 45748 ssh2
2019-12-10 19:31:04
165.22.193.16 attack
Dec 10 06:27:36 ws25vmsma01 sshd[191155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.193.16
Dec 10 06:27:38 ws25vmsma01 sshd[191155]: Failed password for invalid user chuck from 165.22.193.16 port 59290 ssh2
...
2019-12-10 19:00:28

Recently Reported IPs

175.42.163.30 120.231.44.248 120.230.22.83 120.230.20.223
120.229.181.32 120.228.110.61 120.221.12.32 119.182.23.181
113.201.55.123 112.49.119.96 112.47.166.33 2606:4700:10::6814:8013
112.124.54.115 8.138.102.107 39.100.83.5 50.39.104.160
50.32.192.243 216.180.246.221 4.249.17.9 35.240.20.138