城市(city): Shenzhen
省份(region): Guangdong
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | 登录失败。（用户名＝“test”，IP地址＝47.120.31.77，VPN实例名＝“ ”，原因=“Login failed”） |
2025-11-05 15:59:30 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.113.0.0 - 47.127.255.255
CIDR: 47.114.0.0/15, 47.120.0.0/13, 47.113.0.0/16, 47.116.0.0/14
NetName: APNIC
NetHandle: NET-47-113-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-05-07
Updated: 2015-05-07
Ref: https://rdap.arin.net/registry/ip/47.113.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.120.0.0 - 47.127.255.255'
% Abuse contact for '47.120.0.0 - 47.127.255.255' is 'ipas@cnnic.cn'
inetnum: 47.120.0.0 - 47.127.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
last-modified: 2022-09-04T21:47:58Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
remarks: ipas@cnnic.cn is invalid
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-09-19T17:19:56Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.120.31.0/24AS37963'
route: 47.120.31.0/24
descr: Alibaba (US) Technology Co., Ltd.
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-07-10T05:56:16Z
source: APNIC
% Information related to '47.120.31.0/24AS45102'
route: 47.120.31.0/24
descr: Alibaba (US) Technology Co., Ltd.
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-07-10T05:56:43Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.120.31.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48963
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.120.31.77. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110500 1800 900 604800 86400
;; Query time: 148 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 05 15:57:41 CST 2025
;; MSG SIZE rcvd: 105Host 77.31.120.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 77.31.120.47.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.0.73.71 | attack | Unauthorized connection attempt detected from IP address 212.0.73.71 to port 2220 [J] |
2020-01-26 06:30:08 |
| 61.250.146.12 | attackspambots | Unauthorized connection attempt detected from IP address 61.250.146.12 to port 2220 [J] |
2020-01-26 06:42:51 |
| 182.61.176.45 | attack | Jan 25 23:06:50 OPSO sshd\[6571\]: Invalid user tester from 182.61.176.45 port 42298 Jan 25 23:06:50 OPSO sshd\[6571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.45 Jan 25 23:06:52 OPSO sshd\[6571\]: Failed password for invalid user tester from 182.61.176.45 port 42298 ssh2 Jan 25 23:09:57 OPSO sshd\[7030\]: Invalid user walter from 182.61.176.45 port 43052 Jan 25 23:09:57 OPSO sshd\[7030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.45 |
2020-01-26 06:11:33 |
| 39.100.227.224 | attack | Jan 25 23:09:38 lukav-desktop sshd\[17403\]: Invalid user applmgr from 39.100.227.224 Jan 25 23:09:38 lukav-desktop sshd\[17403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.100.227.224 Jan 25 23:09:39 lukav-desktop sshd\[17403\]: Failed password for invalid user applmgr from 39.100.227.224 port 36160 ssh2 Jan 25 23:12:35 lukav-desktop sshd\[24223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.100.227.224 user=root Jan 25 23:12:37 lukav-desktop sshd\[24223\]: Failed password for root from 39.100.227.224 port 46190 ssh2 |
2020-01-26 06:22:10 |
| 218.201.214.177 | attackbots | Jan 25 23:12:21 ncomp sshd[9594]: Invalid user webadmin from 218.201.214.177 Jan 25 23:12:21 ncomp sshd[9594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.201.214.177 Jan 25 23:12:21 ncomp sshd[9594]: Invalid user webadmin from 218.201.214.177 Jan 25 23:12:23 ncomp sshd[9594]: Failed password for invalid user webadmin from 218.201.214.177 port 33049 ssh2 |
2020-01-26 06:31:54 |
| 36.41.174.139 | attackbotsspam | Unauthorized connection attempt detected from IP address 36.41.174.139 to port 2220 [J] |
2020-01-26 06:11:17 |
| 222.186.52.139 | attack | Jan 25 23:12:59 * sshd[27522]: Failed password for root from 222.186.52.139 port 13727 ssh2 Jan 25 23:13:01 * sshd[27522]: Failed password for root from 222.186.52.139 port 13727 ssh2 |
2020-01-26 06:16:14 |
| 222.186.175.155 | attackbots | Jan 25 23:38:04 srv-ubuntu-dev3 sshd[95981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Jan 25 23:38:06 srv-ubuntu-dev3 sshd[95981]: Failed password for root from 222.186.175.155 port 62724 ssh2 Jan 25 23:38:08 srv-ubuntu-dev3 sshd[95981]: Failed password for root from 222.186.175.155 port 62724 ssh2 Jan 25 23:38:04 srv-ubuntu-dev3 sshd[95981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Jan 25 23:38:06 srv-ubuntu-dev3 sshd[95981]: Failed password for root from 222.186.175.155 port 62724 ssh2 Jan 25 23:38:08 srv-ubuntu-dev3 sshd[95981]: Failed password for root from 222.186.175.155 port 62724 ssh2 Jan 25 23:38:04 srv-ubuntu-dev3 sshd[95981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Jan 25 23:38:06 srv-ubuntu-dev3 sshd[95981]: Failed password for root from 222.186.175.155 p ... |
2020-01-26 06:49:16 |
| 203.150.129.216 | attackspambots | 20/1/25@16:12:05: FAIL: Alarm-Telnet address from=203.150.129.216 ... |
2020-01-26 06:43:57 |
| 185.151.242.89 | attack | Portscan or hack attempt detected by psad/fwsnort |
2020-01-26 06:14:06 |
| 139.199.21.245 | attackspam | Jan 25 12:07:15 eddieflores sshd\[29110\]: Invalid user miner from 139.199.21.245 Jan 25 12:07:15 eddieflores sshd\[29110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.21.245 Jan 25 12:07:17 eddieflores sshd\[29110\]: Failed password for invalid user miner from 139.199.21.245 port 38719 ssh2 Jan 25 12:10:10 eddieflores sshd\[29526\]: Invalid user nagios from 139.199.21.245 Jan 25 12:10:10 eddieflores sshd\[29526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.21.245 |
2020-01-26 06:27:55 |
| 222.128.14.106 | attackspam | Jan 25 23:10:27 ns382633 sshd\[12649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.14.106 user=root Jan 25 23:10:30 ns382633 sshd\[12649\]: Failed password for root from 222.128.14.106 port 52642 ssh2 Jan 25 23:42:28 ns382633 sshd\[23619\]: Invalid user echo from 222.128.14.106 port 34011 Jan 25 23:42:28 ns382633 sshd\[23619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.14.106 Jan 25 23:42:29 ns382633 sshd\[23619\]: Failed password for invalid user echo from 222.128.14.106 port 34011 ssh2 |
2020-01-26 06:43:28 |
| 134.209.159.20 | attack | 2020-01-25T21:12:15Z - RDP login failed multiple times. (134.209.159.20) |
2020-01-26 06:37:11 |
| 119.29.246.210 | attack | Jan 25 23:23:21 xeon sshd[23095]: Failed password for root from 119.29.246.210 port 41930 ssh2 |
2020-01-26 06:36:02 |
| 51.159.0.226 | attack | SIP:5060 - unauthorized VoIP call to 1912344660 using friendly-scanner |
2020-01-26 06:37:27 |