City: Hangzhou
Region: Zhejiang
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '112.124.0.0 - 112.127.255.255'
% Abuse contact for '112.124.0.0 - 112.127.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 112.124.0.0 - 112.127.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:56:52Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '112.124.0.0/14AS37963'
route: 112.124.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:03Z
source: APNIC
% Information related to '112.124.0.0/14AS45102'
route: 112.124.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:02Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.124.56.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.124.56.43. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026060700 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 08 00:01:05 CST 2026
;; MSG SIZE rcvd: 106Host 43.56.124.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 43.56.124.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.175.46.170 | attackbots | Invalid user karin from 202.175.46.170 port 54454 |
2019-08-21 08:23:43 |
| 40.118.214.15 | attackspam | 2019-08-20T23:26:50.745923hub.schaetter.us sshd\[22684\]: Invalid user Chicago from 40.118.214.15 2019-08-20T23:26:50.777185hub.schaetter.us sshd\[22684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.118.214.15 2019-08-20T23:26:52.272397hub.schaetter.us sshd\[22684\]: Failed password for invalid user Chicago from 40.118.214.15 port 44872 ssh2 2019-08-20T23:31:16.520524hub.schaetter.us sshd\[22719\]: Invalid user derek from 40.118.214.15 2019-08-20T23:31:16.552856hub.schaetter.us sshd\[22719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.118.214.15 ... |
2019-08-21 08:13:20 |
| 140.207.46.136 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-08-21 07:44:33 |
| 129.211.24.100 | attackspambots | Aug 21 02:25:13 server sshd\[24841\]: Invalid user alfons from 129.211.24.100 port 35606 Aug 21 02:25:13 server sshd\[24841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.100 Aug 21 02:25:15 server sshd\[24841\]: Failed password for invalid user alfons from 129.211.24.100 port 35606 ssh2 Aug 21 02:30:07 server sshd\[13639\]: User root from 129.211.24.100 not allowed because listed in DenyUsers Aug 21 02:30:07 server sshd\[13639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.100 user=root |
2019-08-21 07:45:11 |
| 112.65.201.26 | attackspam | Aug 21 02:59:47 server sshd\[26455\]: Invalid user lfs from 112.65.201.26 port 19772 Aug 21 02:59:47 server sshd\[26455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.201.26 Aug 21 02:59:49 server sshd\[26455\]: Failed password for invalid user lfs from 112.65.201.26 port 19772 ssh2 Aug 21 03:03:27 server sshd\[31421\]: Invalid user deploy from 112.65.201.26 port 36321 Aug 21 03:03:27 server sshd\[31421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.201.26 |
2019-08-21 08:04:42 |
| 129.213.63.120 | attack | Aug 21 00:02:16 vmd17057 sshd\[14030\]: Invalid user deployer from 129.213.63.120 port 57092 Aug 21 00:02:16 vmd17057 sshd\[14030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.63.120 Aug 21 00:02:18 vmd17057 sshd\[14030\]: Failed password for invalid user deployer from 129.213.63.120 port 57092 ssh2 ... |
2019-08-21 08:24:18 |
| 94.143.105.73 | attackspam | Received: from r1a-centrosaurus.mta.dotmailer.com (r1a-centrosaurus.mta.dotmailer.com. [94.143.105.73])
by mx.google.com with ESMTPS id jx7si1259507ejb.237.2019.08.15.05.03.23
for |
2019-08-21 08:18:48 |
| 128.199.136.129 | attackbotsspam | Aug 21 01:29:32 XXX sshd[16878]: Invalid user ofsaa from 128.199.136.129 port 46842 |
2019-08-21 08:14:20 |
| 102.96.2.144 | attackbotsspam | Aug 20 17:11:07 spiceship sshd\[26076\]: Invalid user hera from 102.96.2.144 Aug 20 17:11:07 spiceship sshd\[26076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.96.2.144 ... |
2019-08-21 08:00:59 |
| 193.201.224.12 | attackbots | SSH-BruteForce |
2019-08-21 08:23:19 |
| 213.251.182.103 | attackspam | WordPress XMLRPC scan :: 213.251.182.103 0.064 BYPASS [21/Aug/2019:00:45:14 1000] [censored_2] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-21 07:38:15 |
| 69.75.55.134 | attackspam | DATE:2019-08-21 01:09:11, IP:69.75.55.134, PORT:ssh SSH brute force auth (thor) |
2019-08-21 08:01:27 |
| 159.89.227.145 | attack | Aug 20 17:49:14 dallas01 sshd[12120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.227.145 Aug 20 17:49:16 dallas01 sshd[12120]: Failed password for invalid user smc from 159.89.227.145 port 56566 ssh2 Aug 20 17:52:21 dallas01 sshd[12657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.227.145 |
2019-08-21 07:51:49 |
| 118.24.38.53 | attackbots | Aug 20 23:37:53 server sshd\[20612\]: Invalid user oracle from 118.24.38.53 port 35738 Aug 20 23:37:53 server sshd\[20612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.53 Aug 20 23:37:55 server sshd\[20612\]: Failed password for invalid user oracle from 118.24.38.53 port 35738 ssh2 Aug 20 23:41:20 server sshd\[22726\]: Invalid user vagrant from 118.24.38.53 port 38276 Aug 20 23:41:20 server sshd\[22726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.53 |
2019-08-21 08:04:06 |
| 35.164.182.161 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-08-21 08:15:51 |