必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Guangzhou

省份(region): Guangdong

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       8.128.0.0 - 8.191.255.255
CIDR:           8.128.0.0/10
NetName:        APNIC
NetHandle:      NET-8-128-0-0-1
Parent:         NET8 (NET-8-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2018-04-24
Updated:        2018-04-24
Ref:            https://rdap.arin.net/registry/ip/8.128.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois://whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '8.128.0.0 - 8.159.255.255'

% Abuse contact for '8.128.0.0 - 8.159.255.255' is 'abuse@alibaba-inc.com'

inetnum:        8.128.0.0 - 8.159.255.255
netname:        ALICLOUD
descr:          Aliyun Computing Co.LTD
country:        CN
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
abuse-c:        AA1926-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-ASEPL-SG
mnt-irt:        IRT-ASEPL-SG
last-modified:  2021-04-14T01:11:45Z
source:         APNIC

irt:            IRT-ASEPL-SG
address:        1 Raffles Place
e-mail:         abuse@alibaba-inc.com
abuse-mailbox:  abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
auth:           # Filtered
remarks:        abuse@alibaba-inc.com was validated on 2025-12-09
mnt-by:         MAINT-ASEPL-SG
last-modified:  2025-12-09T07:58:21Z
source:         APNIC

role:           ABUSE ASEPLSG
country:        ZZ
address:        1 Raffles Place
phone:          +000000000
e-mail:         abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
nic-hdl:        AA1926-AP
remarks:        Generated from irt object IRT-ASEPL-SG
remarks:        abuse@alibaba-inc.com was validated on 2025-12-09
abuse-mailbox:  abuse@alibaba-inc.com
mnt-by:         APNIC-ABUSE
last-modified:  2025-12-09T07:58:36Z
source:         APNIC

role:           Alibabacom Singapore E-Commerce Private Limited a
address:        1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore
country:        SG
phone:          +86-571-85022088
fax-no:         +86-571-85022088
e-mail:         abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
nic-hdl:        ASEP1-AP
mnt-by:         MAINT-ASEPL-SG
last-modified:  2025-07-01T06:25:24Z
source:         APNIC

% Information related to '8.138.162.0/24AS37963'

route:          8.138.162.0/24
origin:         AS37963
descr:          Alibaba.com Singapore E-Commerce Private Limited
                8 Shenton Way, #45-01 AXA Tower, Singapore 068811
mnt-by:         MAINT-ASEPL-SG
last-modified:  2020-02-25T09:35:45Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.138.162.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25123
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;8.138.162.18.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026043000 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 22:00:09 CST 2026
;; MSG SIZE  rcvd: 105
HOST信息:
Host 18.162.138.8.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 18.162.138.8.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
172.217.10.225 attackspam
Received: from 76V6cL (kmsevernii.ru [193.124.16.29])
From: =?UTF-8?B?U29uZw==?= 
Subject: =?utf-8?B?VmHFoWUgdsO9cGxhdGEgamUgMSAzNQ==?= =?utf-8?B?OCwwMCBFVVI=?=
MIME-Version: 1.0
Date: Fri, 12 Jun 2020 00:20:09 +0300
X-Priority: 3 (Normal)
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
Máte právo na transakci ve výši 1 358,00 EUR detaily https://rissowv.blogspot.com
2020-06-12 21:54:44
37.213.228.139 attackspam
12-6-2020 14:07:20	Unauthorized connection attempt (Brute-Force).
12-6-2020 14:07:20	Connection from IP address: 37.213.228.139 on port: 587


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.213.228.139
2020-06-12 22:17:26
159.203.81.28 attackbotsspam
scans once in preceeding hours on the ports (in chronological order) 24302 resulting in total of 2 scans from 159.203.0.0/16 block.
2020-06-12 21:55:59
129.204.201.59 attackspambots
Unauthorized connection attempt detected from IP address 129.204.201.59 to port 1433
2020-06-12 21:59:16
149.202.241.249 attack
Lines containing failures of 149.202.241.249
Jun 11 00:56:14 linuxrulz sshd[1206]: Did not receive identification string from 149.202.241.249 port 55866
Jun 11 00:56:19 linuxrulz sshd[1207]: Did not receive identification string from 149.202.241.249 port 40328
Jun 11 00:56:19 linuxrulz sshd[1208]: Did not receive identification string from 149.202.241.249 port 35478
Jun 11 01:05:51 linuxrulz sshd[2425]: Invalid user 178.128.55.184 - SSH-2.0-Ope.SSH_7.6p1 Ubuntu-4ubuntu0.3\r from 149.202.241.249 port 35344
Jun 11 01:05:51 linuxrulz sshd[2425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.241.249 
Jun 11 01:05:53 linuxrulz sshd[2425]: Failed password for invalid user 178.128.55.184 - SSH-2.0-Ope.SSH_7.6p1 Ubuntu-4ubuntu0.3\r from 149.202.241.249 port 35344 ssh2
Jun 11 01:05:54 linuxrulz sshd[2425]: Received disconnect from 149.202.241.249 port 35344:11: Normal Shutdown, Thank you for playing [preauth]
Jun 11 01:05:54 linux........
------------------------------
2020-06-12 21:52:51
46.101.139.105 attackbots
Jun 12 13:46:28 h2646465 sshd[10128]: Invalid user dandan from 46.101.139.105
Jun 12 13:46:28 h2646465 sshd[10128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.139.105
Jun 12 13:46:28 h2646465 sshd[10128]: Invalid user dandan from 46.101.139.105
Jun 12 13:46:30 h2646465 sshd[10128]: Failed password for invalid user dandan from 46.101.139.105 port 52650 ssh2
Jun 12 13:55:26 h2646465 sshd[10628]: Invalid user bot from 46.101.139.105
Jun 12 13:55:26 h2646465 sshd[10628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.139.105
Jun 12 13:55:26 h2646465 sshd[10628]: Invalid user bot from 46.101.139.105
Jun 12 13:55:27 h2646465 sshd[10628]: Failed password for invalid user bot from 46.101.139.105 port 59208 ssh2
Jun 12 14:07:40 h2646465 sshd[11678]: Invalid user admin from 46.101.139.105
...
2020-06-12 21:56:14
220.133.36.112 attackbots
Jun 12 14:45:03 santamaria sshd\[24382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.36.112  user=root
Jun 12 14:45:05 santamaria sshd\[24382\]: Failed password for root from 220.133.36.112 port 33307 ssh2
Jun 12 14:48:00 santamaria sshd\[24406\]: Invalid user admin from 220.133.36.112
Jun 12 14:48:00 santamaria sshd\[24406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.36.112
...
2020-06-12 21:55:44
120.70.100.89 attackspam
Jun 12 13:57:36 meumeu sshd[324274]: Invalid user hadoop from 120.70.100.89 port 37528
Jun 12 13:57:36 meumeu sshd[324274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.89 
Jun 12 13:57:36 meumeu sshd[324274]: Invalid user hadoop from 120.70.100.89 port 37528
Jun 12 13:57:38 meumeu sshd[324274]: Failed password for invalid user hadoop from 120.70.100.89 port 37528 ssh2
Jun 12 14:01:00 meumeu sshd[324729]: Invalid user vertige from 120.70.100.89 port 53009
Jun 12 14:01:00 meumeu sshd[324729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.89 
Jun 12 14:01:00 meumeu sshd[324729]: Invalid user vertige from 120.70.100.89 port 53009
Jun 12 14:01:01 meumeu sshd[324729]: Failed password for invalid user vertige from 120.70.100.89 port 53009 ssh2
Jun 12 14:07:34 meumeu sshd[325077]: Invalid user sv1 from 120.70.100.89 port 55748
...
2020-06-12 22:02:45
129.126.221.19 attackspam
US_Asia_<177>1591963660 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2]:  {TCP} 129.126.221.19:53080
2020-06-12 21:56:31
185.173.35.25 attack
 TCP (SYN) 185.173.35.25:53095 -> port 4443, len 44
2020-06-12 21:49:04
63.141.231.10 attack
63.141.231.10 - - \[12/Jun/2020:14:07:34 +0200\] "GET /robots.txt HTTP/1.1" 404 129 "-" "Mozilla/5.0 \(compatible\; MJ12bot/v1.4.8\; http://mj12bot.com/\)"
63.141.231.10 - - \[12/Jun/2020:14:07:35 +0200\] "GET /administration HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(compatible\; MJ12bot/v1.4.8\; http://mj12bot.com/\)"
63.141.231.10 - - \[12/Jun/2020:14:07:37 +0200\] "GET /contact.php HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(compatible\; MJ12bot/v1.4.8\; http://mj12bot.com/\)"
63.141.231.10 - - \[12/Jun/2020:14:07:38 +0200\] "GET /livre-or/livre.php HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(compatible\; MJ12bot/v1.4.8\; http://mj12bot.com/\)"
...
2020-06-12 21:57:33
51.83.33.88 attackbotsspam
Jun 12 16:05:41 vps639187 sshd\[7145\]: Invalid user user from 51.83.33.88 port 51508
Jun 12 16:05:41 vps639187 sshd\[7145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.33.88
Jun 12 16:05:44 vps639187 sshd\[7145\]: Failed password for invalid user user from 51.83.33.88 port 51508 ssh2
...
2020-06-12 22:14:05
167.172.156.227 attack
scans 2 times in preceeding hours on the ports (in chronological order) 23947 23947 resulting in total of 8 scans from 167.172.0.0/16 block.
2020-06-12 21:53:29
120.92.212.238 attackspam
Jun 12 15:50:29 server sshd[18384]: Failed password for root from 120.92.212.238 port 46792 ssh2
Jun 12 15:54:01 server sshd[18567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.212.238
Jun 12 15:54:03 server sshd[18567]: Failed password for invalid user ali from 120.92.212.238 port 25552 ssh2
...
2020-06-12 22:04:37
92.247.174.189 attackbots
12-6-2020 14:07:37	Unauthorized connection attempt (Brute-Force).
12-6-2020 14:07:37	Connection from IP address: 92.247.174.189 on port: 587


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=92.247.174.189
2020-06-12 22:00:02

最近上报的IP列表

138.61.183.58 45.179.154.178 218.173.203.25 2606:4700:10::6816:1817
2606:4700:10::6814:7164 2606:4700:10::6814:4651 39.144.69.163 25.228.164.128
43.165.186.188 176.65.149.35 2606:4700:10::6816:4620 85.100.121.129
11.161.38.229 66.132.195.55 2606:4700:10::6816:3839 110.78.153.127
159.223.165.4 2606:4700:10::6814:9555 2606:4700:10::ac43:1045 102.96.202.105