城市(city): Beijing
省份(region): Beijing
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '39.96.0.0 - 39.108.255.255'
% Abuse contact for '39.96.0.0 - 39.108.255.255' is 'ipas@cnnic.cn'
inetnum: 39.96.0.0 - 39.108.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
last-modified: 2021-06-16T01:29:48Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
remarks: ipas@cnnic.cn is invalid
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-17T23:08:37Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '39.96.0.0/13AS37963'
route: 39.96.0.0/13
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:06Z
source: APNIC
% Information related to '39.96.0.0/13AS45102'
route: 39.96.0.0/13
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:05Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.97.61.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41970
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;39.97.61.13. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026072901 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 29 22:24:40 CST 2026
;; MSG SIZE rcvd: 104Host 13.61.97.39.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.61.97.39.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.31.83 | attackspam | Aug 23 18:21:14 minden010 sshd[12692]: Failed password for root from 222.186.31.83 port 20847 ssh2 Aug 23 18:21:17 minden010 sshd[12692]: Failed password for root from 222.186.31.83 port 20847 ssh2 Aug 23 18:21:20 minden010 sshd[12692]: Failed password for root from 222.186.31.83 port 20847 ssh2 ... |
2020-08-24 00:22:45 |
| 192.81.209.72 | attackbots | Aug 23 15:50:26 onepixel sshd[3103216]: Invalid user network from 192.81.209.72 port 58896 Aug 23 15:50:26 onepixel sshd[3103216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.209.72 Aug 23 15:50:26 onepixel sshd[3103216]: Invalid user network from 192.81.209.72 port 58896 Aug 23 15:50:28 onepixel sshd[3103216]: Failed password for invalid user network from 192.81.209.72 port 58896 ssh2 Aug 23 15:54:06 onepixel sshd[3103750]: Invalid user cadence from 192.81.209.72 port 37670 |
2020-08-24 00:00:44 |
| 121.32.51.166 | attack | Lines containing failures of 121.32.51.166 (max 1000) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.32.51.166 |
2020-08-24 00:02:42 |
| 49.233.147.108 | attackspam | SSH Login Bruteforce |
2020-08-24 00:15:52 |
| 124.156.102.254 | attack | Aug 23 15:27:58 marvibiene sshd[40404]: Invalid user erick from 124.156.102.254 port 44398 Aug 23 15:27:58 marvibiene sshd[40404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.102.254 Aug 23 15:27:58 marvibiene sshd[40404]: Invalid user erick from 124.156.102.254 port 44398 Aug 23 15:28:00 marvibiene sshd[40404]: Failed password for invalid user erick from 124.156.102.254 port 44398 ssh2 |
2020-08-24 00:06:57 |
| 119.40.37.126 | attackbots | Aug 23 16:00:01 ip106 sshd[2528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.37.126 Aug 23 16:00:03 ip106 sshd[2528]: Failed password for invalid user yyf from 119.40.37.126 port 17329 ssh2 ... |
2020-08-24 00:02:11 |
| 222.186.31.166 | attackspam | 2020-08-23T15:59:53.828644abusebot.cloudsearch.cf sshd[17374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root 2020-08-23T15:59:56.226692abusebot.cloudsearch.cf sshd[17374]: Failed password for root from 222.186.31.166 port 33949 ssh2 2020-08-23T15:59:57.854891abusebot.cloudsearch.cf sshd[17374]: Failed password for root from 222.186.31.166 port 33949 ssh2 2020-08-23T15:59:53.828644abusebot.cloudsearch.cf sshd[17374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root 2020-08-23T15:59:56.226692abusebot.cloudsearch.cf sshd[17374]: Failed password for root from 222.186.31.166 port 33949 ssh2 2020-08-23T15:59:57.854891abusebot.cloudsearch.cf sshd[17374]: Failed password for root from 222.186.31.166 port 33949 ssh2 2020-08-23T15:59:53.828644abusebot.cloudsearch.cf sshd[17374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... |
2020-08-24 00:00:13 |
| 95.52.76.238 | attackspambots | tried to spam in our blog comments: Добрый день, помогите Как называется эта кошка? url_detected:www dot youtube dot com/watch?v=TBn2-1A41_8 #qmHzPwcKn4 |
2020-08-24 00:38:51 |
| 5.196.8.72 | attackbotsspam | Aug 23 14:21:52 kh-dev-server sshd[8575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.8.72 ... |
2020-08-24 00:06:03 |
| 188.165.255.134 | attackspam | 188.165.255.134 - - [23/Aug/2020:15:44:19 +0100] "POST /wp-login.php HTTP/1.1" 200 2489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.255.134 - - [23/Aug/2020:15:44:19 +0100] "POST /wp-login.php HTTP/1.1" 200 2450 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.255.134 - - [23/Aug/2020:15:44:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-24 00:08:01 |
| 134.17.94.214 | attackspambots | Aug 23 15:22:06 |
2020-08-24 00:16:38 |
| 121.48.165.121 | attackbotsspam | Tried sshing with brute force. |
2020-08-24 00:17:02 |
| 47.35.228.146 | attackbots | Aug 23 14:15:56 xxxxxxx5185820 sshd[19175]: Invalid user admin from 47.35.228.146 port 56165 Aug 23 14:15:58 xxxxxxx5185820 sshd[19175]: Failed password for invalid user admin from 47.35.228.146 port 56165 ssh2 Aug 23 14:15:59 xxxxxxx5185820 sshd[19175]: Received disconnect from 47.35.228.146 port 56165:11: Bye Bye [preauth] Aug 23 14:15:59 xxxxxxx5185820 sshd[19175]: Disconnected from 47.35.228.146 port 56165 [preauth] Aug 23 14:16:00 xxxxxxx5185820 sshd[19233]: Invalid user admin from 47.35.228.146 port 56271 Aug 23 14:16:01 xxxxxxx5185820 sshd[19233]: Failed password for invalid user admin from 47.35.228.146 port 56271 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=47.35.228.146 |
2020-08-24 00:32:33 |
| 168.197.31.16 | attackspam | Brute-force attempt banned |
2020-08-24 00:10:38 |
| 159.203.124.234 | attackspam | Aug 23 15:31:37 XXX sshd[5963]: Invalid user summer from 159.203.124.234 port 36938 |
2020-08-24 00:12:02 |