城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 140.205.0.0 - 140.205.255.255
CIDR: 140.205.0.0/16
NetName: APNIC-ERX-140-205-0-0
NetHandle: NET-140-205-0-0-1
Parent: NET140 (NET-140-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://rdap.arin.net/registry/ip/140.205.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '140.205.0.0 - 140.205.255.255'
% Abuse contact for '140.205.0.0 - 140.205.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 140.205.0.0 - 140.205.255.255
netname: Taobao
descr: Zhejiang Taobao Network Co.,Ltd
descr: 2nd floor, Westlake International technology Building
descr: 391Wener Road, Hangzhou, China
country: CN
admin-c: ZM678-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-TAOBAO-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:57:06Z
source: APNIC
irt: IRT-Taobao-CN
address: 2nd floor, Westlake International technology Building, 391 Wener Road, Hangzhou
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Shuo Yu
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM678-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-04-13T23:21:57Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '140.205.160.0/24AS37963'
route: 140.205.160.0/24
origin: AS37963
descr: China Internet Network Information Center
Floor1, Building No.1 C/-Chinese Academy of Sciences
4, South 4th Street
Haidian District,
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:11:41Z
source: APNIC
% Information related to '140.205.160.0/24AS45102'
route: 140.205.160.0/24
origin: AS45102
descr: China Internet Network Information Center
Floor1, Building No.1 C/-Chinese Academy of Sciences
4, South 4th Street
Haidian District,
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:14:08Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.205.160.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52522
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.205.160.128. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042802 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 29 08:47:36 CST 2026
;; MSG SIZE rcvd: 108Host 128.160.205.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 128.160.205.140.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.92.250.91 | attackbots | Mar 24 06:05:58 ns3042688 sshd\[19750\]: Invalid user matana from 212.92.250.91 Mar 24 06:06:00 ns3042688 sshd\[19750\]: Failed password for invalid user matana from 212.92.250.91 port 50480 ssh2 Mar 24 06:09:52 ns3042688 sshd\[20518\]: Invalid user ariana from 212.92.250.91 Mar 24 06:09:54 ns3042688 sshd\[20518\]: Failed password for invalid user ariana from 212.92.250.91 port 38794 ssh2 Mar 24 06:13:42 ns3042688 sshd\[21225\]: Invalid user weblogic from 212.92.250.91 ... |
2020-03-24 13:48:34 |
| 14.29.182.232 | attack | Automatic report - SSH Brute-Force Attack |
2020-03-24 14:26:45 |
| 113.238.118.170 | attackbotsspam | Unauthorised access (Mar 24) SRC=113.238.118.170 LEN=40 TTL=49 ID=57704 TCP DPT=8080 WINDOW=38937 SYN Unauthorised access (Mar 23) SRC=113.238.118.170 LEN=40 TTL=49 ID=34787 TCP DPT=8080 WINDOW=38937 SYN Unauthorised access (Mar 23) SRC=113.238.118.170 LEN=40 TTL=49 ID=46459 TCP DPT=8080 WINDOW=44535 SYN Unauthorised access (Mar 23) SRC=113.238.118.170 LEN=40 TTL=49 ID=31983 TCP DPT=8080 WINDOW=38937 SYN Unauthorised access (Mar 22) SRC=113.238.118.170 LEN=40 TTL=49 ID=13993 TCP DPT=8080 WINDOW=37352 SYN |
2020-03-24 14:19:56 |
| 188.87.101.119 | attackbotsspam | Mar 24 08:40:00 server sshd\[26246\]: Invalid user wangyi from 188.87.101.119 Mar 24 08:40:00 server sshd\[26246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.87.101.119 Mar 24 08:40:02 server sshd\[26246\]: Failed password for invalid user wangyi from 188.87.101.119 port 11429 ssh2 Mar 24 08:54:42 server sshd\[29788\]: Invalid user mai from 188.87.101.119 Mar 24 08:54:42 server sshd\[29788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.87.101.119 ... |
2020-03-24 14:07:07 |
| 51.161.11.195 | attackspam | Mar 23 20:05:58 sachi sshd\[14247\]: Invalid user bios from 51.161.11.195 Mar 23 20:05:58 sachi sshd\[14247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.ip-51-161-11.net Mar 23 20:06:00 sachi sshd\[14247\]: Failed password for invalid user bios from 51.161.11.195 port 48730 ssh2 Mar 23 20:09:45 sachi sshd\[14602\]: Invalid user kr from 51.161.11.195 Mar 23 20:09:45 sachi sshd\[14602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.ip-51-161-11.net |
2020-03-24 14:16:11 |
| 202.152.0.14 | attackbots | SSH Authentication Attempts Exceeded |
2020-03-24 14:09:59 |
| 154.85.35.129 | attackbots | 2020-03-24T05:59:37.195434librenms sshd[8204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.85.35.129 2020-03-24T05:59:37.188996librenms sshd[8204]: Invalid user sarah from 154.85.35.129 port 49184 2020-03-24T05:59:39.295597librenms sshd[8204]: Failed password for invalid user sarah from 154.85.35.129 port 49184 ssh2 ... |
2020-03-24 13:43:07 |
| 201.211.184.85 | attack | Honeypot attack, port: 81, PTR: 201-211-184-85.genericrev.cantv.net. |
2020-03-24 14:18:27 |
| 165.22.186.178 | attackspambots | Mar 24 06:01:39 srv-ubuntu-dev3 sshd[130202]: Invalid user zhenglx from 165.22.186.178 Mar 24 06:01:39 srv-ubuntu-dev3 sshd[130202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178 Mar 24 06:01:39 srv-ubuntu-dev3 sshd[130202]: Invalid user zhenglx from 165.22.186.178 Mar 24 06:01:41 srv-ubuntu-dev3 sshd[130202]: Failed password for invalid user zhenglx from 165.22.186.178 port 59968 ssh2 Mar 24 06:05:11 srv-ubuntu-dev3 sshd[972]: Invalid user wanght from 165.22.186.178 Mar 24 06:05:11 srv-ubuntu-dev3 sshd[972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.186.178 Mar 24 06:05:11 srv-ubuntu-dev3 sshd[972]: Invalid user wanght from 165.22.186.178 Mar 24 06:05:13 srv-ubuntu-dev3 sshd[972]: Failed password for invalid user wanght from 165.22.186.178 port 47644 ssh2 Mar 24 06:08:46 srv-ubuntu-dev3 sshd[1553]: Invalid user user from 165.22.186.178 ... |
2020-03-24 13:54:55 |
| 65.229.5.158 | attackspambots | Mar 24 05:34:37 eventyay sshd[29395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.229.5.158 Mar 24 05:34:39 eventyay sshd[29395]: Failed password for invalid user v from 65.229.5.158 port 42265 ssh2 Mar 24 05:41:49 eventyay sshd[29548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.229.5.158 ... |
2020-03-24 13:28:27 |
| 163.44.159.50 | attackspam | Mar 24 06:44:46 h2646465 sshd[16924]: Invalid user noc from 163.44.159.50 Mar 24 06:44:46 h2646465 sshd[16924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.44.159.50 Mar 24 06:44:46 h2646465 sshd[16924]: Invalid user noc from 163.44.159.50 Mar 24 06:44:48 h2646465 sshd[16924]: Failed password for invalid user noc from 163.44.159.50 port 58324 ssh2 Mar 24 06:52:04 h2646465 sshd[19542]: Invalid user xuxo from 163.44.159.50 Mar 24 06:52:04 h2646465 sshd[19542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.44.159.50 Mar 24 06:52:04 h2646465 sshd[19542]: Invalid user xuxo from 163.44.159.50 Mar 24 06:52:06 h2646465 sshd[19542]: Failed password for invalid user xuxo from 163.44.159.50 port 52610 ssh2 Mar 24 06:54:42 h2646465 sshd[20184]: Invalid user of from 163.44.159.50 ... |
2020-03-24 14:07:40 |
| 149.56.28.100 | attack | unauthorized connection attempt |
2020-03-24 13:30:06 |
| 160.153.245.134 | attackspam | Mar 24 06:54:31 ns381471 sshd[12046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.245.134 Mar 24 06:54:33 ns381471 sshd[12046]: Failed password for invalid user shonda from 160.153.245.134 port 42682 ssh2 |
2020-03-24 14:19:13 |
| 213.138.77.238 | attackbotsspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-03-24 13:29:16 |
| 95.84.146.201 | attackspambots | Mar 24 06:53:37 ns382633 sshd\[20800\]: Invalid user yi from 95.84.146.201 port 54946 Mar 24 06:53:37 ns382633 sshd\[20800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.84.146.201 Mar 24 06:53:38 ns382633 sshd\[20800\]: Failed password for invalid user yi from 95.84.146.201 port 54946 ssh2 Mar 24 07:00:11 ns382633 sshd\[22288\]: Invalid user lf from 95.84.146.201 port 50600 Mar 24 07:00:11 ns382633 sshd\[22288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.84.146.201 |
2020-03-24 14:21:32 |