City: Chongqing
Region: Chongqìng
Country: China
Internet Service Provider: China Mobile
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '223.64.0.0 - 223.117.255.255'
% Abuse contact for '223.64.0.0 - 223.117.255.255' is 'abuse@chinamobile.com'
inetnum: 223.64.0.0 - 223.117.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: HL1318-AP
tech-c: HL1318-AP
abuse-c: AC2006-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
mnt-irt: IRT-CHINAMOBILE-CN
last-modified: 2020-10-20T00:58:37Z
source: APNIC
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
remarks: abuse@chinamobile.com was validated on 2026-03-23
mnt-by: MAINT-CN-CMCC
last-modified: 2026-03-23T00:47:53Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
org-type: LIR
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5268-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:14:48Z
source: APNIC
role: ABUSE CHINAMOBILECN
country: ZZ
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
phone: +000000000
e-mail: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
nic-hdl: AC2006-AP
remarks: Generated from irt object IRT-CHINAMOBILE-CN
remarks: abuse@chinamobile.com was validated on 2026-03-23
abuse-mailbox: abuse@chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2026-03-23T00:48:02Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
% Information related to '223.96.0.0/12AS9808'
route: 223.96.0.0/12
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2012-02-15T08:54:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.109.252.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21591
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;223.109.252.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071501 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 04:43:10 CST 2026
;; MSG SIZE rcvd: 108142.252.109.223.in-addr.arpa domain name pointer sogouspider-223-109-252-142.crawl.sogou.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
142.252.109.223.in-addr.arpa name = sogouspider-223-109-252-142.crawl.sogou.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.100.154.2 | attackspambots | 198.100.154.2 was recorded 29 times by 1 hosts attempting to connect to the following ports: 3389,25,53. Incident counter (4h, 24h, all-time): 29, 246, 3631 |
2019-11-13 08:48:20 |
| 79.143.44.122 | attackspam | 2019-11-13T04:59:28.102062abusebot-7.cloudsearch.cf sshd\[26972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.44.122 user=root |
2019-11-13 13:05:32 |
| 31.134.151.109 | attack | scan z |
2019-11-13 08:49:22 |
| 201.55.199.143 | attackbotsspam | Nov 12 12:50:24 hpm sshd\[30056\]: Invalid user hlobil from 201.55.199.143 Nov 12 12:50:24 hpm sshd\[30056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.199.143 Nov 12 12:50:26 hpm sshd\[30056\]: Failed password for invalid user hlobil from 201.55.199.143 port 52662 ssh2 Nov 12 12:58:49 hpm sshd\[30749\]: Invalid user pressley from 201.55.199.143 Nov 12 12:58:49 hpm sshd\[30749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.199.143 |
2019-11-13 08:54:21 |
| 112.85.42.94 | attackspam | Nov 13 02:20:59 pkdns2 sshd\[27183\]: Failed password for root from 112.85.42.94 port 21377 ssh2Nov 13 02:21:01 pkdns2 sshd\[27183\]: Failed password for root from 112.85.42.94 port 21377 ssh2Nov 13 02:21:03 pkdns2 sshd\[27183\]: Failed password for root from 112.85.42.94 port 21377 ssh2Nov 13 02:21:36 pkdns2 sshd\[27216\]: Failed password for root from 112.85.42.94 port 48434 ssh2Nov 13 02:21:39 pkdns2 sshd\[27216\]: Failed password for root from 112.85.42.94 port 48434 ssh2Nov 13 02:21:41 pkdns2 sshd\[27216\]: Failed password for root from 112.85.42.94 port 48434 ssh2 ... |
2019-11-13 08:38:17 |
| 132.232.81.207 | attack | 2019-11-13T00:45:08.331754abusebot-6.cloudsearch.cf sshd\[24921\]: Invalid user nobody999 from 132.232.81.207 port 48804 |
2019-11-13 09:03:22 |
| 81.22.45.190 | attackbotsspam | Nov 13 01:27:09 mc1 kernel: \[4891106.149352\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=29773 PROTO=TCP SPT=45479 DPT=61495 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 13 01:27:41 mc1 kernel: \[4891138.812429\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=16700 PROTO=TCP SPT=45479 DPT=61276 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 13 01:30:34 mc1 kernel: \[4891311.530271\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=2929 PROTO=TCP SPT=45479 DPT=60567 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-13 08:34:00 |
| 118.24.246.208 | attack | Nov 13 05:54:37 h2177944 sshd\[28850\]: Invalid user fan from 118.24.246.208 port 52838 Nov 13 05:54:37 h2177944 sshd\[28850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.246.208 Nov 13 05:54:40 h2177944 sshd\[28850\]: Failed password for invalid user fan from 118.24.246.208 port 52838 ssh2 Nov 13 05:59:33 h2177944 sshd\[29011\]: Invalid user keiffenheim from 118.24.246.208 port 58672 Nov 13 05:59:33 h2177944 sshd\[29011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.246.208 ... |
2019-11-13 13:00:17 |
| 106.12.197.119 | attackspambots | Nov 12 13:45:27 server sshd\[11328\]: Failed password for invalid user shepardson from 106.12.197.119 port 47706 ssh2 Nov 13 01:15:30 server sshd\[31177\]: Invalid user sundra from 106.12.197.119 Nov 13 01:15:30 server sshd\[31177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.197.119 Nov 13 01:15:32 server sshd\[31177\]: Failed password for invalid user sundra from 106.12.197.119 port 47110 ssh2 Nov 13 01:33:59 server sshd\[3111\]: Invalid user handbury from 106.12.197.119 Nov 13 01:33:59 server sshd\[3111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.197.119 ... |
2019-11-13 08:34:31 |
| 119.42.175.200 | attackbots | Nov 12 12:20:22 server sshd\[21850\]: Failed password for invalid user narendra from 119.42.175.200 port 38844 ssh2 Nov 12 19:38:45 server sshd\[7466\]: Invalid user www from 119.42.175.200 Nov 12 19:38:45 server sshd\[7466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.175.200 Nov 12 19:38:47 server sshd\[7466\]: Failed password for invalid user www from 119.42.175.200 port 34859 ssh2 Nov 13 03:13:30 server sshd\[31887\]: Invalid user zabbix from 119.42.175.200 ... |
2019-11-13 08:46:21 |
| 185.216.132.15 | attackbotsspam | SSH Bruteforce |
2019-11-13 09:06:47 |
| 89.14.80.9 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.14.80.9/ DE - 1H : (71) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN6805 IP : 89.14.80.9 CIDR : 89.14.0.0/16 PREFIX COUNT : 42 UNIQUE IP COUNT : 7555584 ATTACKS DETECTED ASN6805 : 1H - 1 3H - 2 6H - 2 12H - 6 24H - 11 DateTime : 2019-11-13 00:21:26 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-13 08:36:13 |
| 175.37.33.88 | attackspam | RDP Bruteforce |
2019-11-13 13:03:17 |
| 193.19.119.176 | attackspam | Nov 12 18:53:18 tdfoods sshd\[19788\]: Invalid user 169.51.81.103 from 193.19.119.176 Nov 12 18:53:18 tdfoods sshd\[19788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.19.119.176 Nov 12 18:53:20 tdfoods sshd\[19788\]: Failed password for invalid user 169.51.81.103 from 193.19.119.176 port 51324 ssh2 Nov 12 18:59:37 tdfoods sshd\[20300\]: Invalid user 169.51.81.103 from 193.19.119.176 Nov 12 18:59:37 tdfoods sshd\[20300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.19.119.176 |
2019-11-13 13:01:36 |
| 220.170.193.112 | attackspambots | Nov 12 20:59:25 mockhub sshd[17555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.170.193.112 Nov 12 20:59:27 mockhub sshd[17555]: Failed password for invalid user byroad from 220.170.193.112 port 40796 ssh2 ... |
2019-11-13 13:04:57 |