City: Hangzhou
Region: Zhejiang
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '121.40.0.0 - 121.43.255.255'
% Abuse contact for '121.40.0.0 - 121.43.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 121.40.0.0 - 121.43.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:57:01Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '121.40.0.0/14AS37963'
route: 121.40.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:05Z
source: APNIC
% Information related to '121.40.0.0/14AS45102'
route: 121.40.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:03Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.43.143.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.43.143.24. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080600 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 01:30:03 CST 2026
;; MSG SIZE rcvd: 106Host 24.143.43.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 24.143.43.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.98.9.205 | attackspambots | Sep 2 21:55:56 mail postfix/smtpd\[6696\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 21:57:07 mail postfix/smtpd\[11468\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 21:58:17 mail postfix/smtpd\[14810\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-03 04:01:50 |
| 129.211.49.77 | attack | Sep 2 20:03:21 mail sshd\[520\]: Failed password for invalid user p@55wOrd from 129.211.49.77 port 32834 ssh2 Sep 2 20:07:58 mail sshd\[1287\]: Invalid user gbeothy from 129.211.49.77 port 48134 Sep 2 20:07:58 mail sshd\[1287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.49.77 Sep 2 20:08:00 mail sshd\[1287\]: Failed password for invalid user gbeothy from 129.211.49.77 port 48134 ssh2 Sep 2 20:12:38 mail sshd\[2227\]: Invalid user qwerty from 129.211.49.77 port 35210 |
2019-09-03 03:48:52 |
| 113.87.25.0 | attackspam | Sep 2 15:06:43 mxgate1 postfix/postscreen[19452]: CONNECT from [113.87.25.0]:13715 to [176.31.12.44]:25 Sep 2 15:06:43 mxgate1 postfix/dnsblog[19457]: addr 113.87.25.0 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 2 15:06:43 mxgate1 postfix/dnsblog[19457]: addr 113.87.25.0 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 2 15:06:43 mxgate1 postfix/dnsblog[19457]: addr 113.87.25.0 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 2 15:06:43 mxgate1 postfix/dnsblog[19455]: addr 113.87.25.0 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 2 15:06:43 mxgate1 postfix/dnsblog[19456]: addr 113.87.25.0 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 2 15:06:49 mxgate1 postfix/postscreen[19452]: DNSBL rank 4 for [113.87.25.0]:13715 Sep x@x Sep 2 15:06:51 mxgate1 postfix/postscreen[19452]: DISCONNECT [113.87.25.0]:13715 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.87.25.0 |
2019-09-03 04:17:21 |
| 51.75.65.209 | attack | 2019-09-02T20:31:43.307894abusebot-8.cloudsearch.cf sshd\[7931\]: Invalid user wx from 51.75.65.209 port 57484 |
2019-09-03 04:33:30 |
| 141.98.9.195 | attack | Sep 2 21:39:02 mail postfix/smtpd\[14805\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 21:40:11 mail postfix/smtpd\[13053\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 21:41:22 mail postfix/smtpd\[13045\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-03 03:46:48 |
| 112.97.53.28 | attackbots | IP reached maximum auth failures |
2019-09-03 04:20:00 |
| 188.173.62.236 | attack | 188.173.62.236 - - [02/Sep/2019:15:14:37 +0200] "GET /wp-login.php HTTP/1.1" 302 573 ... |
2019-09-03 03:58:16 |
| 62.76.5.157 | attackspambots | xmlrpc attack |
2019-09-03 04:09:46 |
| 177.209.104.10 | attackspambots | Sep 2 21:23:17 legacy sshd[21026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.209.104.10 Sep 2 21:23:19 legacy sshd[21026]: Failed password for invalid user crc from 177.209.104.10 port 57858 ssh2 Sep 2 21:27:59 legacy sshd[21165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.209.104.10 ... |
2019-09-03 04:24:35 |
| 122.199.152.114 | attackspambots | Sep 2 14:53:03 mail sshd\[17292\]: Invalid user sonar from 122.199.152.114 Sep 2 14:53:03 mail sshd\[17292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.199.152.114 ... |
2019-09-03 03:52:08 |
| 187.109.168.98 | attackspam | failed_logins |
2019-09-03 03:44:46 |
| 200.54.255.253 | attackspam | $f2bV_matches |
2019-09-03 03:41:56 |
| 68.183.115.83 | attackspambots | Sep 2 15:10:22 minden010 sshd[1195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.115.83 Sep 2 15:10:24 minden010 sshd[1195]: Failed password for invalid user valerie from 68.183.115.83 port 40008 ssh2 Sep 2 15:14:16 minden010 sshd[4491]: Failed password for root from 68.183.115.83 port 55076 ssh2 ... |
2019-09-03 03:42:31 |
| 120.52.9.102 | attackspam | 2019-09-02T14:21:27.157773Z d03a9bf5b5b2 New connection: 120.52.9.102:24454 (172.17.0.2:2222) [session: d03a9bf5b5b2] 2019-09-02T14:37:08.954769Z 3e6c32c917f2 New connection: 120.52.9.102:4514 (172.17.0.2:2222) [session: 3e6c32c917f2] |
2019-09-03 03:52:38 |
| 61.155.140.67 | attack | Sep 2 17:23:44 markkoudstaal sshd[31217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.140.67 Sep 2 17:23:47 markkoudstaal sshd[31217]: Failed password for invalid user cm from 61.155.140.67 port 58511 ssh2 Sep 2 17:29:12 markkoudstaal sshd[31725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.140.67 |
2019-09-03 04:10:19 |