China Mobile IP Ranges
China Mobile announces more separate IPv4 prefixes than any other network on this site - over fourteen thousand of them, under AS9808. Its registry records go the other way entirely: almost everything is filed under a single netname.
- Provider
- China Mobile
- Primary ASN
- AS9808
- Category
- ISP
- Headquarters
- Beijing, China
- Announced IPv4 prefixes
- 14320
- Registry
- APNIC
Known IP ranges
These prefixes are currently announced to the global routing table by AS9808 (CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd.). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
39.128.0.0/10
120.192.0.0/10
183.192.0.0/10
111.0.0.0/10
223.64.0.0/10
36.128.0.0/10
117.128.0.0/10
112.0.0.0/10
211.136.0.0/13
218.200.0.0/13
2409:8000::/20
240a:42f4::/31
240a:42e6::/31 (IPv6)
What does a China Mobile IP mean in a privacy test?
A China Mobile address as your visible IP means traffic left over CMNET with nothing tunnelling it. Unlike the other two Chinese carriers, querying the specific address adds almost nothing here - the blocks are filed under one flat name, so the ASN is very nearly all the registry has to say.
Where to get China Mobile's address list
No allowlist is published, so APNIC is the source. The aut-num for AS9808 carries the AS name CHINAMOBILE-CN and the organisation China Mobile Communications Group Co., Ltd., registered on 4 September 2008. The prefixes above are the largest currently announced, but they are a small window on the whole: AS9808 puts more than fourteen thousand IPv4 prefixes and several thousand IPv6 ones into the routing table. The AS9808 page carries the registry record with the routing detail.
That number is the thing to plan around. A prefix list for this network is not something to paste into a firewall - it is larger than most routers' entire view of some regions - and it changes constantly as a network that deaggregates this heavily reannounces. Matching on the ASN is not merely more convenient here, it is the only version that stays correct without a feed to poll, and there is no feed.
One netname for almost everything
Where China Telecom and China Unicom delegate their space province by province, China Mobile does not. Query 211.136.0.0 and the object is CMNET, described as China Mobile Communications Corporation, a mobile communications network operator in China and an internet service provider in China. Query 39.128.0.0, in a completely different part of the address space, and the object is CMNET with the same three lines. The per-address query that returns a province on the other two carriers returns the same flat record here.
So on this network the ASN really is the answer, and the answer is coarse: the address is China Mobile, in China. It does not distinguish a handset from a fixed line from a machine in a China Mobile facility, and there is no reverse DNS convention to fall back on the way there is on SoftBank or BT. Anyone who needs finer detail than that will not find it in the published record.
Related tools
Frequently asked questions
What IP ranges does China Mobile use?
China Mobile announces its network under AS9808, registered with APNIC to China Mobile Communications Group Co., Ltd. under the AS name CHINAMOBILE-CN. The largest blocks currently routed there are listed above, among them 39.128.0.0/10, 120.192.0.0/10 and 183.192.0.0/10 - but AS9808 announces over fourteen thousand IPv4 prefixes in total.
Why does a China Mobile IP appear in my privacy test?
A China Mobile address as your visible IP means traffic left over CMNET with nothing tunnelling it. Unlike the other two Chinese carriers, querying the specific address adds almost nothing here - the blocks are filed under one flat name, so the ASN is very nearly all the registry has to say.
Why does China Mobile announce so many IP ranges?
AS9808 deaggregates far more heavily than any other network covered here, putting more than fourteen thousand IPv4 prefixes and several thousand IPv6 ones into the routing table. The practical consequence is that a pasted prefix list is unusable, and matching on the ASN is the only approach that stays current.
What is CMNET?
It is the netname on China Mobile's registry objects. Blocks in completely different parts of its address space - 211.136.0.0/13 and 39.128.0.0/10, for example - both come back as CMNET with the same description, so the per-address query does not narrow things the way it does for China Telecom or China Unicom.
Can I tell whether a China Mobile IP is a phone or a server?
Not from the published data. The APNIC records file the space under one flat netname without assignment types, and there is no reverse-DNS convention on this network to read a line type from. The record establishes the operator and the country and stops there.