城市(city): Seoul
省份(region): Seoul Special City
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.74.0.0 - 47.87.255.255
CIDR: 47.80.0.0/13, 47.76.0.0/14, 47.74.0.0/15
NetName: AL-3
NetHandle: NET-47-74-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Alibaba Cloud LLC (AL-3)
RegDate: 2016-03-17
Updated: 2017-04-26
Ref: https://rdap.arin.net/registry/ip/47.74.0.0
OrgName: Alibaba Cloud LLC
OrgId: AL-3
Address: 400 S El Camino Real, Suite 400
City: San Mateo
StateProv: CA
PostalCode: 94402
Country: US
RegDate: 2010-10-29
Updated: 2026-02-11
Comment: 1.For AliCloud IPR Infringement and Abuse Claim, please use below link with browser to report: https://intl.aliyun.com/report
Comment:
Comment: 2.For Alibaba.com and Aliexpress.com's IPR Infringement , please use below link with browser to report: https://ipp.alibabagroup.com
Comment:
Comment: 3.For Alibaba.com and Aliexpress.com's Abuse, please send email to those two mail lists to report: intl-abuse@list.alibaba-inc.com and abuse@alibaba-inc.com
Comment:
Comment: 4. For network issue, please send email to this mail list: aliops-goc@list.alibaba-inc.com
Ref: https://rdap.arin.net/registry/entity/AL-3
OrgNOCHandle: ALIBA-ARIN
OrgNOCName: Alibaba NOC
OrgNOCPhone: +1-408-748-1200
OrgNOCEmail: noc@list.alibaba-inc.com
OrgNOCRef: https://rdap.arin.net/registry/entity/ALIBA-ARIN
OrgTechHandle: ALIBA-ARIN
OrgTechName: Alibaba NOC
OrgTechPhone: +1-408-748-1200
OrgTechEmail: noc@list.alibaba-inc.com
OrgTechRef: https://rdap.arin.net/registry/entity/ALIBA-ARIN
OrgAbuseHandle: NETWO4028-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-785-5580
OrgAbuseEmail: abuse@alibaba-inc.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NETWO4028-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.80.12.76
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.80.12.76. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026052000 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 16:40:03 CST 2026
;; MSG SIZE rcvd: 104Host 76.12.80.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 76.12.80.47.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 187.16.35.131 | attack | libpam_shield report: forced login attempt |
2019-07-01 15:54:08 |
| 69.30.213.202 | attackspambots | 20 attempts against mh-misbehave-ban on sand.magehost.pro |
2019-07-01 15:59:03 |
| 188.165.210.176 | attackbots | Jul 1 05:47:23 Ubuntu-1404-trusty-64-minimal sshd\[4707\]: Invalid user doku from 188.165.210.176 Jul 1 05:47:23 Ubuntu-1404-trusty-64-minimal sshd\[4707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.210.176 Jul 1 05:47:25 Ubuntu-1404-trusty-64-minimal sshd\[4707\]: Failed password for invalid user doku from 188.165.210.176 port 46754 ssh2 Jul 1 05:50:39 Ubuntu-1404-trusty-64-minimal sshd\[8460\]: Invalid user chris from 188.165.210.176 Jul 1 05:50:39 Ubuntu-1404-trusty-64-minimal sshd\[8460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.210.176 |
2019-07-01 16:48:22 |
| 191.53.197.56 | attack | libpam_shield report: forced login attempt |
2019-07-01 16:40:16 |
| 91.121.205.83 | attack | Jul 1 08:09:56 lnxmail61 sshd[6416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.205.83 Jul 1 08:09:56 lnxmail61 sshd[6416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.205.83 |
2019-07-01 16:12:45 |
| 187.111.152.142 | attackspambots | libpam_shield report: forced login attempt |
2019-07-01 16:26:33 |
| 82.147.120.45 | attack | Jul 1 07:08:54 our-server-hostname postfix/smtpd[29807]: connect from unknown[82.147.120.45] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 1 07:09:04 our-server-hostname postfix/smtpd[29807]: lost connection after RCPT from unknown[82.147.120.45] Jul 1 07:09:04 our-server-hostname postfix/smtpd[29807]: disconnect from unknown[82.147.120.45] Jul 1 07:13:26 our-server-hostname postfix/smtpd[32755]: connect from unknown[82.147.120.45] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 1 07:13:32 our-server-hostname postfix/smtpd[32755]: lost connection after RCPT from unknown[82.147.120.45] Jul 1 07:13:32 our-server-hostname postfix/smtpd[32755]: disconnect from unknown[82.147.120.45] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.147.120.45 |
2019-07-01 15:52:34 |
| 109.70.190.141 | attack | Jul 1 10:14:04 our-server-hostname postfix/smtpd[26998]: connect from unknown[109.70.190.141] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 1 10:14:08 our-server-hostname postfix/smtpd[26998]: lost connection after RCPT from unknown[109.70.190.141] Jul 1 10:14:08 our-server-hostname postfix/smtpd[26998]: disconnect from unknown[109.70.190.141] Jul 1 11:36:30 our-server-hostname postfix/smtpd[7866]: connect from unknown[109.70.190.141] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 1 11:36:40 our-server-hostname postfix/smtpd[7866]: too many errors after RCPT from unknown[109.70.190.141] Jul 1 11:36:40 our-server-hostname postfix/smtpd[7866]: disconnect from unknown[109.70.190.141] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.70.190.141 |
2019-07-01 16:37:54 |
| 45.55.184.78 | attackspambots | $f2bV_matches |
2019-07-01 16:45:20 |
| 222.218.17.20 | attackbots | Brute force attempt |
2019-07-01 16:37:33 |
| 14.102.76.10 | attackbots | SPF Fail sender not permitted to send mail for @1919ic.com |
2019-07-01 15:51:19 |
| 221.145.180.32 | attack | Jul 1 11:50:44 localhost sshd[30991]: Invalid user webmaster from 221.145.180.32 port 63408 Jul 1 11:50:44 localhost sshd[30991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.145.180.32 Jul 1 11:50:44 localhost sshd[30991]: Invalid user webmaster from 221.145.180.32 port 63408 Jul 1 11:50:46 localhost sshd[30991]: Failed password for invalid user webmaster from 221.145.180.32 port 63408 ssh2 ... |
2019-07-01 16:45:45 |
| 217.182.7.137 | attackbots | [blogs scan/spam/exploit]
[CMS scan: wordpress]
[WP scan/spam/exploit]
[unknown virtual host name: maps.{domain}]
[multiweb: req 8 domains(hosts/ip)]
[bad UserAgent]
Blocklist.DE:"listed [bruteforcelogin]" |
2019-07-01 16:38:47 |
| 5.133.66.237 | attack | Postfix DNSBL listed. Trying to send SPAM. |
2019-07-01 16:39:09 |
| 51.91.38.190 | attackspam | [WP scan/spam/exploit] [multiweb: req 4 domains(hosts/ip)] [bad UserAgent] Blocklist.DE:"listed [bruteforcelogin]" |
2019-07-01 16:14:29 |