城市(city): Hangzhou
省份(region): Zhejiang
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.98.0.0 - 47.112.255.255
CIDR: 47.112.0.0/16, 47.98.0.0/15, 47.100.0.0/14, 47.104.0.0/13
NetName: APNIC
NetHandle: NET-47-98-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-04-01
Updated: 2015-04-01
Ref: https://rdap.arin.net/registry/ip/47.98.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.98.0.0 - 47.99.255.255'
% Abuse contact for '47.98.0.0 - 47.99.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 47.98.0.0 - 47.99.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:58:18Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.98.0.0/15AS37963'
route: 47.98.0.0/15
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:06Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.98.180.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.98.180.144. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032500 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 25 21:30:34 CST 2026
;; MSG SIZE rcvd: 106Host 144.180.98.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 144.180.98.47.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 95.57.7.87 | attackspambots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-26 18:33:12 |
| 222.143.27.34 | attackspam | May 26 08:21:34 marvibiene sshd[52529]: Invalid user webserver from 222.143.27.34 port 54399 May 26 08:21:34 marvibiene sshd[52529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.143.27.34 May 26 08:21:34 marvibiene sshd[52529]: Invalid user webserver from 222.143.27.34 port 54399 May 26 08:21:35 marvibiene sshd[52529]: Failed password for invalid user webserver from 222.143.27.34 port 54399 ssh2 ... |
2020-05-26 18:27:32 |
| 49.88.112.55 | attackspambots | prod6 ... |
2020-05-26 18:05:10 |
| 41.140.242.75 | attack | [portscan] tcp/1433 [MsSQL] *(RWIN=1024)(05261127) |
2020-05-26 18:20:15 |
| 195.54.160.40 | attack | SmallBizIT.US 22 packets to tcp(1774,3152,4706,6127,15510,21622,22540,24727,24840,28083,32245,33474,36156,36558,40160,40704,43714,49487,60398,60584,62593,64716) |
2020-05-26 18:03:47 |
| 163.172.146.119 | attackbotsspam | Automatic report - Banned IP Access |
2020-05-26 17:54:49 |
| 222.244.144.163 | attackbots | May 26 10:35:10 sso sshd[13234]: Failed password for root from 222.244.144.163 port 40074 ssh2 ... |
2020-05-26 17:56:04 |
| 52.84.64.129 | attackbotsspam | Randomnumbers.cloudfront.net Attempted to log into news with no prompting from me. The message read “News wants to log in using d3ltcs8dr69ei6.cloudfront.net.This allows the app and. website to share information about you. I have never encountered anything like this. I did not know”cloudfronts could automatically log into your device. |
2020-05-26 18:22:33 |
| 222.186.42.137 | attack | May 26 00:25:28 web9 sshd\[2367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root May 26 00:25:30 web9 sshd\[2367\]: Failed password for root from 222.186.42.137 port 25973 ssh2 May 26 00:25:36 web9 sshd\[2391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root May 26 00:25:38 web9 sshd\[2391\]: Failed password for root from 222.186.42.137 port 57284 ssh2 May 26 00:25:51 web9 sshd\[2425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root |
2020-05-26 18:34:44 |
| 223.238.76.70 | attack | Unauthorized connection attempt from IP address 223.238.76.70 on Port 445(SMB) |
2020-05-26 18:28:36 |
| 149.129.128.130 | attack | ICMP MH Probe, Scan /Distributed - |
2020-05-26 18:04:17 |
| 164.151.136.226 | attack | Unauthorized connection attempt from IP address 164.151.136.226 on Port 445(SMB) |
2020-05-26 18:29:45 |
| 148.70.242.55 | attack | May 26 10:26:53 inter-technics sshd[32556]: Invalid user ftpuser from 148.70.242.55 port 40816 May 26 10:26:53 inter-technics sshd[32556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.242.55 May 26 10:26:53 inter-technics sshd[32556]: Invalid user ftpuser from 148.70.242.55 port 40816 May 26 10:26:55 inter-technics sshd[32556]: Failed password for invalid user ftpuser from 148.70.242.55 port 40816 ssh2 May 26 10:31:14 inter-technics sshd[382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.242.55 user=root May 26 10:31:16 inter-technics sshd[382]: Failed password for root from 148.70.242.55 port 49898 ssh2 ... |
2020-05-26 18:08:27 |
| 183.89.212.220 | attackbots | 'IP reached maximum auth failures for a one day block' |
2020-05-26 18:32:22 |
| 222.186.52.39 | attackspambots | May 26 12:02:28 ucs sshd\[26508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root May 26 12:02:29 ucs sshd\[26506\]: error: PAM: User not known to the underlying authentication module for root from 222.186.52.39 May 26 12:02:30 ucs sshd\[26509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root ... |
2020-05-26 18:06:09 |