City: Hangzhou
Region: Zhejiang
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '121.40.0.0 - 121.43.255.255'
% Abuse contact for '121.40.0.0 - 121.43.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 121.40.0.0 - 121.43.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:57:01Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '121.40.0.0/14AS37963'
route: 121.40.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:05Z
source: APNIC
% Information related to '121.40.0.0/14AS45102'
route: 121.40.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:03Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.41.176.251
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54840
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.41.176.251. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026062402 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 25 12:00:04 CST 2026
;; MSG SIZE rcvd: 107Host 251.176.41.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 251.176.41.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.238.239.151 | attackspam | Sep 30 11:53:18 wbs sshd\[15726\]: Invalid user developer from 201.238.239.151 Sep 30 11:53:18 wbs sshd\[15726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151 Sep 30 11:53:20 wbs sshd\[15726\]: Failed password for invalid user developer from 201.238.239.151 port 59203 ssh2 Sep 30 11:58:17 wbs sshd\[16159\]: Invalid user ox from 201.238.239.151 Sep 30 11:58:17 wbs sshd\[16159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151 |
2019-10-01 06:04:12 |
| 103.38.215.20 | attackspambots | Sep 30 22:58:48 srv206 sshd[32570]: Invalid user user from 103.38.215.20 ... |
2019-10-01 05:59:28 |
| 45.195.151.166 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.195.151.166/ HK - 1H : (69) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN24119 IP : 45.195.151.166 CIDR : 45.195.151.0/24 PREFIX COUNT : 20 UNIQUE IP COUNT : 16384 WYKRYTE ATAKI Z ASN24119 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : Port FTP 21 Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 05:46:46 |
| 186.18.108.3 | attackspam | Sep 30 23:40:42 ns41 sshd[32613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.18.108.3 Sep 30 23:40:42 ns41 sshd[32613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.18.108.3 |
2019-10-01 05:57:31 |
| 2607:5300:60:797f:: | attackspambots | [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:11 +0200] "POST /[munged]: HTTP/1.1" 200 6982 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:15 +0200] "POST /[munged]: HTTP/1.1" 200 6849 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:18 +0200] "POST /[munged]: HTTP/1.1" 200 6848 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:20 +0200] "POST /[munged]: HTTP/1.1" 200 6849 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:23 +0200] "POST /[munged]: HTTP/1.1" 200 6847 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 2607:5300:60:797f:: - - [30/Sep/2019:22:58:26 +0200] "POST /[munged]: HTTP/1.1" |
2019-10-01 06:05:33 |
| 217.128.45.117 | attack | Automatic report - Port Scan Attack |
2019-10-01 06:01:57 |
| 45.165.96.1 | attackbots | Sep 30 23:48:34 pkdns2 sshd\[62133\]: Invalid user reception from 45.165.96.1Sep 30 23:48:36 pkdns2 sshd\[62133\]: Failed password for invalid user reception from 45.165.96.1 port 38076 ssh2Sep 30 23:53:32 pkdns2 sshd\[62403\]: Invalid user osbash from 45.165.96.1Sep 30 23:53:34 pkdns2 sshd\[62403\]: Failed password for invalid user osbash from 45.165.96.1 port 53564 ssh2Sep 30 23:58:32 pkdns2 sshd\[62649\]: Invalid user pi from 45.165.96.1Sep 30 23:58:34 pkdns2 sshd\[62649\]: Failed password for invalid user pi from 45.165.96.1 port 40818 ssh2 ... |
2019-10-01 06:08:06 |
| 148.64.56.113 | attackbots | Automatic report - Banned IP Access |
2019-10-01 05:48:49 |
| 213.120.170.34 | attackbots | Sep 30 23:38:37 lnxded64 sshd[5071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.120.170.34 |
2019-10-01 06:30:00 |
| 116.16.150.139 | attackbots | Sep 30 22:58:06 ns3367391 proftpd\[22535\]: 127.0.0.1 \(116.16.150.139\[116.16.150.139\]\) - USER anonymous: no such user found from 116.16.150.139 \[116.16.150.139\] to 37.187.78.186:21 Sep 30 22:58:07 ns3367391 proftpd\[22537\]: 127.0.0.1 \(116.16.150.139\[116.16.150.139\]\) - USER yourdailypornmovies: no such user found from 116.16.150.139 \[116.16.150.139\] to 37.187.78.186:21 ... |
2019-10-01 06:27:04 |
| 112.21.191.244 | attackbotsspam | Sep 30 23:55:15 vps647732 sshd[21088]: Failed password for root from 112.21.191.244 port 41254 ssh2 Sep 30 23:59:01 vps647732 sshd[21124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.244 ... |
2019-10-01 06:01:37 |
| 139.155.33.169 | attack | Sep 30 19:34:40 vtv3 sshd\[6766\]: Invalid user admin from 139.155.33.169 port 50398 Sep 30 19:34:40 vtv3 sshd\[6766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.33.169 Sep 30 19:34:41 vtv3 sshd\[6766\]: Failed password for invalid user admin from 139.155.33.169 port 50398 ssh2 Sep 30 19:41:15 vtv3 sshd\[10316\]: Invalid user ax400 from 139.155.33.169 port 60014 Sep 30 19:41:15 vtv3 sshd\[10316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.33.169 Sep 30 19:52:45 vtv3 sshd\[15943\]: Invalid user gast3 from 139.155.33.169 port 42564 Sep 30 19:52:45 vtv3 sshd\[15943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.33.169 Sep 30 19:52:48 vtv3 sshd\[15943\]: Failed password for invalid user gast3 from 139.155.33.169 port 42564 ssh2 Sep 30 19:58:33 vtv3 sshd\[18626\]: Invalid user overruled from 139.155.33.169 port 47952 Sep 30 19:58:33 vtv3 sshd\[1862 |
2019-10-01 06:04:29 |
| 5.196.67.41 | attackspambots | Sep 30 12:01:39 eddieflores sshd\[16279\]: Invalid user steamserver from 5.196.67.41 Sep 30 12:01:39 eddieflores sshd\[16279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu Sep 30 12:01:41 eddieflores sshd\[16279\]: Failed password for invalid user steamserver from 5.196.67.41 port 35052 ssh2 Sep 30 12:05:57 eddieflores sshd\[16642\]: Invalid user virusalert from 5.196.67.41 Sep 30 12:05:57 eddieflores sshd\[16642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu |
2019-10-01 06:19:08 |
| 118.70.190.188 | attackspambots | Sep 30 10:54:38 eddieflores sshd\[10201\]: Invalid user lara from 118.70.190.188 Sep 30 10:54:38 eddieflores sshd\[10201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.190.188 Sep 30 10:54:40 eddieflores sshd\[10201\]: Failed password for invalid user lara from 118.70.190.188 port 55376 ssh2 Sep 30 10:59:02 eddieflores sshd\[10596\]: Invalid user itadmin from 118.70.190.188 Sep 30 10:59:02 eddieflores sshd\[10596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.190.188 |
2019-10-01 05:47:50 |
| 45.118.144.31 | attack | Sep 30 21:51:09 game-panel sshd[28948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.118.144.31 Sep 30 21:51:10 game-panel sshd[28948]: Failed password for invalid user telnetd from 45.118.144.31 port 52184 ssh2 Sep 30 21:55:57 game-panel sshd[29144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.118.144.31 |
2019-10-01 06:07:50 |