城市(city): Beijing
省份(region): Beijing
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 47.95.207.195 | attack | Unauthorized connection attempt detected from IP address 47.95.207.195 to port 874 [T] |
2020-05-05 21:15:00 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.92.0.0 - 47.97.255.255
CIDR: 47.92.0.0/14, 47.96.0.0/15
NetName: APNIC
NetHandle: NET-47-92-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-03-02
Updated: 2015-03-02
Ref: https://rdap.arin.net/registry/ip/47.92.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.92.0.0 - 47.95.255.255'
% Abuse contact for '47.92.0.0 - 47.95.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 47.92.0.0 - 47.95.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:58:17Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.92.0.0/14AS37963'
route: 47.92.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:06Z
source: APNIC
% Information related to '47.92.0.0/14AS45102'
route: 47.92.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.95.207.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32980
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.95.207.149. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081600 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 14:00:20 CST 2026
;; MSG SIZE rcvd: 106Host 149.207.95.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.207.95.47.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.197.66.68 | attackspambots | Invalid user gbase from 138.197.66.68 port 39511 |
2020-06-21 16:49:28 |
| 167.71.218.188 | attackbots | Jun 21 09:26:56 xeon sshd[10939]: Failed password for invalid user www from 167.71.218.188 port 60666 ssh2 |
2020-06-21 16:34:49 |
| 49.205.178.198 | attackspam | Unauthorised access (Jun 21) SRC=49.205.178.198 LEN=52 TTL=114 ID=16675 DF TCP DPT=445 WINDOW=8192 SYN |
2020-06-21 16:42:07 |
| 49.233.7.27 | attackspam | Invalid user admin from 49.233.7.27 port 35770 |
2020-06-21 17:06:00 |
| 213.119.66.50 | attackspambots | 20/6/20@23:53:16: FAIL: IoT-Telnet address from=213.119.66.50 ... |
2020-06-21 16:55:03 |
| 191.92.124.82 | attack | Jun 21 09:17:50 gw1 sshd[9222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.92.124.82 Jun 21 09:17:52 gw1 sshd[9222]: Failed password for invalid user atendimento from 191.92.124.82 port 34224 ssh2 ... |
2020-06-21 16:58:35 |
| 222.186.173.215 | attack | Jun 21 10:48:56 minden010 sshd[19320]: Failed password for root from 222.186.173.215 port 13880 ssh2 Jun 21 10:49:00 minden010 sshd[19320]: Failed password for root from 222.186.173.215 port 13880 ssh2 Jun 21 10:49:03 minden010 sshd[19320]: Failed password for root from 222.186.173.215 port 13880 ssh2 Jun 21 10:49:10 minden010 sshd[19320]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 13880 ssh2 [preauth] ... |
2020-06-21 16:50:25 |
| 152.136.34.52 | attackspam | Invalid user ramses from 152.136.34.52 port 41990 |
2020-06-21 16:43:41 |
| 178.32.219.209 | attackbots | Auto Fail2Ban report, multiple SSH login attempts. |
2020-06-21 16:37:08 |
| 177.139.136.73 | attackspam | Invalid user sammy from 177.139.136.73 port 39952 |
2020-06-21 16:31:34 |
| 87.251.74.42 | attack | RU_ru-avm-1-mnt_<177>1592727892 [1:2402000:5581] ET DROP Dshield Block Listed Source group 1 [Classification: Misc Attack] [Priority: 2]: |
2020-06-21 16:38:31 |
| 45.178.2.165 | attack | Jun 21 05:37:40 ns392434 sshd[15159]: Invalid user aml from 45.178.2.165 port 47901 Jun 21 05:37:40 ns392434 sshd[15159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.2.165 Jun 21 05:37:40 ns392434 sshd[15159]: Invalid user aml from 45.178.2.165 port 47901 Jun 21 05:37:43 ns392434 sshd[15159]: Failed password for invalid user aml from 45.178.2.165 port 47901 ssh2 Jun 21 05:41:40 ns392434 sshd[15372]: Invalid user comunica from 45.178.2.165 port 48340 Jun 21 05:41:40 ns392434 sshd[15372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.2.165 Jun 21 05:41:40 ns392434 sshd[15372]: Invalid user comunica from 45.178.2.165 port 48340 Jun 21 05:41:42 ns392434 sshd[15372]: Failed password for invalid user comunica from 45.178.2.165 port 48340 ssh2 Jun 21 05:53:51 ns392434 sshd[15766]: Invalid user apache from 45.178.2.165 port 49651 |
2020-06-21 16:30:27 |
| 103.81.115.80 | attackspam | 445/tcp [2020-06-21]1pkt |
2020-06-21 17:02:59 |
| 181.111.181.50 | attack | Invalid user ecg from 181.111.181.50 port 54458 |
2020-06-21 16:39:09 |
| 51.77.230.48 | attackspam | Jun 21 07:01:21 prox sshd[32580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.230.48 Jun 21 07:01:23 prox sshd[32580]: Failed password for invalid user sophia from 51.77.230.48 port 47008 ssh2 |
2020-06-21 16:52:43 |