City: Shanghai
Region: Shanghai
Country: China
Internet Service Provider: China Mobile
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '223.64.0.0 - 223.117.255.255'
% Abuse contact for '223.64.0.0 - 223.117.255.255' is 'abuse@chinamobile.com'
inetnum: 223.64.0.0 - 223.117.255.255
netname: CMNET
descr: China Mobile Communications Corporation
descr: Mobile Communications Network Operator in China
descr: Internet Service Provider in China
country: CN
org: ORG-CM1-AP
admin-c: HL1318-AP
tech-c: HL1318-AP
abuse-c: AC2006-AP
status: ALLOCATED PORTABLE
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CN-CMCC
mnt-routes: MAINT-CN-CMCC
mnt-irt: IRT-CHINAMOBILE-CN
last-modified: 2020-10-20T00:58:37Z
source: APNIC
irt: IRT-CHINAMOBILE-CN
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
e-mail: abuse@chinamobile.com
abuse-mailbox: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
auth: # Filtered
remarks: abuse@chinamobile.com was validated on 2026-03-23
mnt-by: MAINT-CN-CMCC
last-modified: 2026-03-23T00:47:53Z
source: APNIC
organisation: ORG-CM1-AP
org-name: China Mobile
org-type: LIR
country: CN
address: 29, Jinrong Ave.
phone: +86-10-5268-6688
fax-no: +86-10-5261-6187
e-mail: hostmaster@chinamobile.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:14:48Z
source: APNIC
role: ABUSE CHINAMOBILECN
country: ZZ
address: China Mobile Communications Corporation
address: 29, Jinrong Ave., Xicheng District, Beijing, 100032
phone: +000000000
e-mail: abuse@chinamobile.com
admin-c: CT74-AP
tech-c: CT74-AP
nic-hdl: AC2006-AP
remarks: Generated from irt object IRT-CHINAMOBILE-CN
remarks: abuse@chinamobile.com was validated on 2026-03-23
abuse-mailbox: abuse@chinamobile.com
mnt-by: APNIC-ABUSE
last-modified: 2026-03-23T00:48:02Z
source: APNIC
person: haijun li
nic-hdl: HL1318-AP
e-mail: hostmaster@chinamobile.com
address: 29,Jinrong Ave, Xicheng district,beijing,100032
phone: +86 1052686688
fax-no: +86 10 52616187
country: CN
mnt-by: MAINT-CN-CMCC
abuse-mailbox: abuse@chinamobile.com
last-modified: 2016-11-29T09:38:38Z
source: APNIC
% Information related to '223.64.0.0/11AS9808'
route: 223.64.0.0/11
descr: China Mobile communications corporation
origin: AS9808
mnt-by: MAINT-CN-CMCC
last-modified: 2012-02-15T08:54:23Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.91.179.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;223.91.179.91. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032900 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 29 18:31:16 CST 2026
;; MSG SIZE rcvd: 106
Host 91.179.91.223.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.179.91.223.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.63.109.74 | attack | $f2bV_matches |
2019-12-16 06:31:42 |
| 167.250.132.18 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2019-12-16 06:38:32 |
| 129.213.63.120 | attack | Dec 15 13:15:32 *** sshd[8914]: Failed password for invalid user villa from 129.213.63.120 port 57066 ssh2 Dec 15 13:32:58 *** sshd[9260]: Failed password for invalid user 12 from 129.213.63.120 port 56354 ssh2 Dec 15 13:37:57 *** sshd[9343]: Failed password for invalid user Pas$word1 from 129.213.63.120 port 36072 ssh2 Dec 15 13:43:01 *** sshd[9549]: Failed password for invalid user marsita from 129.213.63.120 port 44090 ssh2 Dec 15 13:48:06 *** sshd[9700]: Failed password for invalid user Pa$$word@2016 from 129.213.63.120 port 52132 ssh2 Dec 15 13:53:08 *** sshd[9791]: Failed password for invalid user public321 from 129.213.63.120 port 59840 ssh2 Dec 15 13:58:10 *** sshd[9871]: Failed password for invalid user noervaag from 129.213.63.120 port 39588 ssh2 Dec 15 14:03:17 *** sshd[10023]: Failed password for invalid user dongming from 129.213.63.120 port 47658 ssh2 Dec 15 14:08:17 *** sshd[10160]: Failed password for invalid user malgosia from 129.213.63.120 port 55562 ssh2 Dec 15 14:13:21 *** sshd[10307]: Fa |
2019-12-16 06:21:56 |
| 222.232.29.235 | attackspam | $f2bV_matches |
2019-12-16 06:30:26 |
| 192.64.86.92 | attack | 192.64.86.92 was recorded 5 times by 3 hosts attempting to connect to the following ports: 5060,9060. Incident counter (4h, 24h, all-time): 5, 39, 390 |
2019-12-16 06:47:07 |
| 49.234.68.13 | attackspambots | Dec 16 00:53:44 server sshd\[21551\]: Invalid user eire from 49.234.68.13 Dec 16 00:53:44 server sshd\[21551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.68.13 Dec 16 00:53:46 server sshd\[21551\]: Failed password for invalid user eire from 49.234.68.13 port 58664 ssh2 Dec 16 01:10:46 server sshd\[26731\]: Invalid user oluseyi from 49.234.68.13 Dec 16 01:10:46 server sshd\[26731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.68.13 ... |
2019-12-16 06:31:54 |
| 181.49.132.18 | attackspam | Dec 15 14:57:22 firewall sshd[23818]: Invalid user dhanaletchmi from 181.49.132.18 Dec 15 14:57:25 firewall sshd[23818]: Failed password for invalid user dhanaletchmi from 181.49.132.18 port 34786 ssh2 Dec 15 15:03:12 firewall sshd[23942]: Invalid user ######## from 181.49.132.18 ... |
2019-12-16 06:39:18 |
| 117.50.100.216 | attack | Dec 15 17:54:36 debian-2gb-nbg1-2 kernel: \[81665.907222\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=117.50.100.216 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=16643 PROTO=TCP SPT=58914 DPT=636 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-16 06:45:51 |
| 192.144.174.51 | attack | 2019-12-15T21:49:07.133211abusebot-5.cloudsearch.cf sshd\[29554\]: Invalid user mysql from 192.144.174.51 port 36500 2019-12-15T21:49:07.138699abusebot-5.cloudsearch.cf sshd\[29554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.174.51 2019-12-15T21:49:09.257189abusebot-5.cloudsearch.cf sshd\[29554\]: Failed password for invalid user mysql from 192.144.174.51 port 36500 ssh2 2019-12-15T21:55:32.475266abusebot-5.cloudsearch.cf sshd\[29618\]: Invalid user venbakm from 192.144.174.51 port 34728 |
2019-12-16 06:23:33 |
| 162.243.237.90 | attackbots | Brute-force attempt banned |
2019-12-16 06:57:24 |
| 182.73.208.249 | attackspam | Unauthorized connection attempt from IP address 182.73.208.249 on Port 445(SMB) |
2019-12-16 06:28:49 |
| 139.219.15.116 | attackspam | Dec 15 23:09:05 meumeu sshd[5227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.15.116 Dec 15 23:09:07 meumeu sshd[5227]: Failed password for invalid user steineger from 139.219.15.116 port 34836 ssh2 Dec 15 23:15:35 meumeu sshd[6112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.15.116 ... |
2019-12-16 06:31:07 |
| 74.82.47.3 | attackbots | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2019-12-16 06:43:05 |
| 58.218.209.239 | attack | $f2bV_matches |
2019-12-16 06:51:36 |
| 95.189.104.78 | attackspam | Unauthorised access (Dec 16) SRC=95.189.104.78 LEN=52 PREC=0x20 TTL=114 ID=17216 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-16 06:59:19 |