City: Shanghai
Region: Shanghai
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.113.0.0 - 47.127.255.255
CIDR: 47.120.0.0/13, 47.113.0.0/16, 47.114.0.0/15, 47.116.0.0/14
NetName: APNIC
NetHandle: NET-47-113-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-05-07
Updated: 2015-05-07
Ref: https://rdap.arin.net/registry/ip/47.113.0.0
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.116.0.0 - 47.119.255.255'
% Abuse contact for '47.116.0.0 - 47.119.255.255' is 'ipas@cnnic.cn'
inetnum: 47.116.0.0 - 47.119.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
last-modified: 2022-09-04T21:47:51Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail: ipas@cnnic.cn
abuse-mailbox: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
remarks: ipas@cnnic.cn is invalid
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-17T23:08:37Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.116.38.0/24AS37963'
route: 47.116.38.0/24
descr: Alibaba (US) Technology Co., Ltd.
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-06-28T00:43:16Z
source: APNIC
% Information related to '47.116.38.0/24AS45102'
route: 47.116.38.0/24
descr: Alibaba (US) Technology Co., Ltd.
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-06-28T00:43:35Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.116.38.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.116.38.127. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026013000 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 30 18:54:21 CST 2026
;; MSG SIZE rcvd: 106
Host 127.38.116.47.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 127.38.116.47.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.111.94.49 | attackbots | Automatic report - Port Scan Attack |
2020-03-09 20:08:09 |
| 223.206.238.52 | attack | Honeypot attack, port: 445, PTR: mx-ll-223.206.238-52.dynamic.3bb.in.th. |
2020-03-09 20:10:22 |
| 172.245.85.214 | attackbotsspam | MYH,DEF GET /adminer.php |
2020-03-09 19:50:56 |
| 123.21.246.87 | attackbots | Mar 9 05:44:58 www sshd\[29659\]: Invalid user admin from 123.21.246.87 Mar 9 05:44:58 www sshd\[29659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.246.87 Mar 9 05:45:00 www sshd\[29659\]: Failed password for invalid user admin from 123.21.246.87 port 34133 ssh2 ... |
2020-03-09 19:28:56 |
| 188.166.150.17 | attackbotsspam | Brute-force attempt banned |
2020-03-09 19:59:49 |
| 194.146.50.45 | attackspam | Mar 9 04:43:22 |
2020-03-09 20:12:40 |
| 39.115.19.138 | attack | Mar 9 04:07:03 archiv sshd[31805]: Invalid user admin from 39.115.19.138 port 60376 Mar 9 04:07:03 archiv sshd[31805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.115.19.138 Mar 9 04:07:05 archiv sshd[31805]: Failed password for invalid user admin from 39.115.19.138 port 60376 ssh2 Mar 9 04:07:06 archiv sshd[31805]: Received disconnect from 39.115.19.138 port 60376:11: Bye Bye [preauth] Mar 9 04:07:06 archiv sshd[31805]: Disconnected from 39.115.19.138 port 60376 [preauth] Mar 9 04:21:54 archiv sshd[31977]: Invalid user bot1 from 39.115.19.138 port 50980 Mar 9 04:21:54 archiv sshd[31977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.115.19.138 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.115.19.138 |
2020-03-09 20:01:35 |
| 117.222.57.127 | attack | Automatic report - Port Scan Attack |
2020-03-09 19:36:17 |
| 23.89.52.82 | attackbotsspam | MYH,DEF GET /adminer.php |
2020-03-09 19:40:46 |
| 120.35.26.129 | attackbotsspam | Mar 9 11:20:45 MK-Soft-VM3 sshd[24157]: Failed password for root from 120.35.26.129 port 15371 ssh2 ... |
2020-03-09 19:27:56 |
| 14.167.233.172 | attackspam | Mar 9 09:10:59 xeon sshd[39524]: Failed password for root from 14.167.233.172 port 36590 ssh2 |
2020-03-09 19:52:17 |
| 186.4.151.103 | attackspambots | Honeypot attack, port: 445, PTR: host-186-4-151-103.netlife.ec. |
2020-03-09 19:52:29 |
| 192.241.204.232 | attackbots | firewall-block, port(s): 2455/tcp |
2020-03-09 19:59:34 |
| 109.167.231.122 | attackspambots | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-03-09 19:43:06 |
| 106.52.32.61 | attackbotsspam | Mar 9 13:06:35 master sshd[3844]: Failed password for root from 106.52.32.61 port 58782 ssh2 Mar 9 13:11:52 master sshd[3846]: Failed password for invalid user vbox from 106.52.32.61 port 45928 ssh2 |
2020-03-09 19:40:28 |