City: Hangzhou
Region: Zhejiang
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '121.40.0.0 - 121.43.255.255'
% Abuse contact for '121.40.0.0 - 121.43.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 121.40.0.0 - 121.43.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:57:01Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '121.40.0.0/14AS37963'
route: 121.40.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:05Z
source: APNIC
% Information related to '121.40.0.0/14AS45102'
route: 121.40.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:03Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.43.118.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.43.118.248. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040600 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 18:01:47 CST 2026
;; MSG SIZE rcvd: 107Host 248.118.43.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 248.118.43.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.250.140.74 | attack | 2019-12-21T06:43:53.875154shield sshd\[20235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.140.74 user=mail 2019-12-21T06:43:56.252814shield sshd\[20235\]: Failed password for mail from 180.250.140.74 port 32960 ssh2 2019-12-21T06:51:04.349402shield sshd\[22600\]: Invalid user bowin from 180.250.140.74 port 36262 2019-12-21T06:51:04.353764shield sshd\[22600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.140.74 2019-12-21T06:51:06.234489shield sshd\[22600\]: Failed password for invalid user bowin from 180.250.140.74 port 36262 ssh2 |
2019-12-21 14:56:53 |
| 90.84.232.4 | attackbots | "SERVER-WEBAPP Shenzhen TVT Digital Technology API OS command injection attempt" |
2019-12-21 15:06:14 |
| 222.186.173.154 | attackbots | Dec 21 07:50:28 vpn01 sshd[25836]: Failed password for root from 222.186.173.154 port 25910 ssh2 Dec 21 07:50:40 vpn01 sshd[25836]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 25910 ssh2 [preauth] ... |
2019-12-21 14:52:04 |
| 124.16.139.244 | attack | Dec 21 07:29:53 MK-Soft-VM5 sshd[24720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.139.244 Dec 21 07:29:55 MK-Soft-VM5 sshd[24720]: Failed password for invalid user nt from 124.16.139.244 port 45923 ssh2 ... |
2019-12-21 15:17:20 |
| 54.37.22.169 | attackbotsspam | Unauthorized connection attempt detected from IP address 54.37.22.169 to port 80 |
2019-12-21 14:48:59 |
| 112.35.26.43 | attackspam | Dec 21 07:24:15 meumeu sshd[6780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.26.43 Dec 21 07:24:16 meumeu sshd[6780]: Failed password for invalid user test from 112.35.26.43 port 55756 ssh2 Dec 21 07:30:09 meumeu sshd[7589]: Failed password for root from 112.35.26.43 port 44074 ssh2 ... |
2019-12-21 15:04:22 |
| 37.187.26.207 | attack | Dec 21 02:03:54 plusreed sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.26.207 user=root Dec 21 02:03:55 plusreed sshd[20041]: Failed password for root from 37.187.26.207 port 54296 ssh2 ... |
2019-12-21 15:10:06 |
| 45.136.108.161 | attackspam | firewall-block, port(s): 400/tcp, 808/tcp, 3030/tcp, 8899/tcp, 33397/tcp |
2019-12-21 15:12:41 |
| 181.211.112.2 | attackbots | Dec 21 07:30:47 MK-Soft-Root2 sshd[7762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.211.112.2 Dec 21 07:30:49 MK-Soft-Root2 sshd[7762]: Failed password for invalid user daveon from 181.211.112.2 port 30860 ssh2 ... |
2019-12-21 14:56:05 |
| 194.61.26.34 | attackspambots | Triggered by Fail2Ban at Ares web server |
2019-12-21 15:23:24 |
| 188.166.16.118 | attackbotsspam | Dec 21 07:29:53 srv206 sshd[7105]: Invalid user lgo from 188.166.16.118 ... |
2019-12-21 15:21:42 |
| 54.224.163.162 | attackspambots | Triggered: repeated knocking on closed ports. |
2019-12-21 15:07:27 |
| 194.67.195.186 | attackbots | Dec 21 07:30:42 icinga sshd[25697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.67.195.186 Dec 21 07:30:44 icinga sshd[25697]: Failed password for invalid user huangjm from 194.67.195.186 port 46020 ssh2 ... |
2019-12-21 14:55:06 |
| 119.200.186.168 | attackspambots | Dec 21 06:24:09 game-panel sshd[3605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 Dec 21 06:24:11 game-panel sshd[3605]: Failed password for invalid user marketing from 119.200.186.168 port 47138 ssh2 Dec 21 06:30:21 game-panel sshd[3891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.200.186.168 |
2019-12-21 14:46:02 |
| 185.220.101.32 | attack | [portscan] Port scan |
2019-12-21 15:19:22 |