City: Beijing
Region: Beijing
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.92.0.0 - 47.97.255.255
CIDR: 47.96.0.0/15, 47.92.0.0/14
NetName: APNIC
NetHandle: NET-47-92-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-03-02
Updated: 2015-03-02
Ref: https://rdap.arin.net/registry/ip/47.92.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.92.0.0 - 47.95.255.255'
% Abuse contact for '47.92.0.0 - 47.95.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 47.92.0.0 - 47.95.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
last-modified: 2023-11-28T00:58:17Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.92.0.0/14AS37963'
route: 47.92.0.0/14
descr: Hangzhou Alibaba Advertising Co.,Ltd.
country: CN
origin: AS37963
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:06Z
source: APNIC
% Information related to '47.92.0.0/14AS45102'
route: 47.92.0.0/14
descr: Alibaba (US) Technology Co., Ltd.
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-08-07T23:28:04Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.92.247.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35980
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.92.247.164. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081101 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 12:00:17 CST 2026
;; MSG SIZE rcvd: 106Host 164.247.92.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 164.247.92.47.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.177.1.108 | attackspam | Feb 22 05:54:48 ns381471 sshd[27801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.177.1.108 Feb 22 05:54:50 ns381471 sshd[27801]: Failed password for invalid user wyjeong from 203.177.1.108 port 42952 ssh2 |
2020-02-22 13:21:39 |
| 171.38.148.194 | attackbots | Port probing on unauthorized port 23 |
2020-02-22 13:19:29 |
| 120.70.100.54 | attackspam | Feb 22 05:48:04 h1745522 sshd[31163]: Invalid user saslauth from 120.70.100.54 port 44126 Feb 22 05:48:04 h1745522 sshd[31163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.54 Feb 22 05:48:04 h1745522 sshd[31163]: Invalid user saslauth from 120.70.100.54 port 44126 Feb 22 05:48:07 h1745522 sshd[31163]: Failed password for invalid user saslauth from 120.70.100.54 port 44126 ssh2 Feb 22 05:51:25 h1745522 sshd[31296]: Invalid user test from 120.70.100.54 port 53874 Feb 22 05:51:25 h1745522 sshd[31296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.54 Feb 22 05:51:25 h1745522 sshd[31296]: Invalid user test from 120.70.100.54 port 53874 Feb 22 05:51:27 h1745522 sshd[31296]: Failed password for invalid user test from 120.70.100.54 port 53874 ssh2 Feb 22 05:54:56 h1745522 sshd[31373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.100.54 u ... |
2020-02-22 13:18:07 |
| 112.29.66.22 | attack | Automatic report - SSH Brute-Force Attack |
2020-02-22 13:23:51 |
| 80.90.80.54 | attack | Automatic report - XMLRPC Attack |
2020-02-22 13:35:17 |
| 188.174.160.114 | attack | Feb 22 00:00:07 plusreed sshd[23734]: Invalid user lianwei from 188.174.160.114 ... |
2020-02-22 13:33:14 |
| 68.34.15.8 | attackbots | Feb 22 05:49:54 h1745522 sshd[31227]: Invalid user odoo from 68.34.15.8 port 57244 Feb 22 05:49:54 h1745522 sshd[31227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.34.15.8 Feb 22 05:49:54 h1745522 sshd[31227]: Invalid user odoo from 68.34.15.8 port 57244 Feb 22 05:49:57 h1745522 sshd[31227]: Failed password for invalid user odoo from 68.34.15.8 port 57244 ssh2 Feb 22 05:52:28 h1745522 sshd[31317]: Invalid user user2 from 68.34.15.8 port 53658 Feb 22 05:52:28 h1745522 sshd[31317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.34.15.8 Feb 22 05:52:28 h1745522 sshd[31317]: Invalid user user2 from 68.34.15.8 port 53658 Feb 22 05:52:30 h1745522 sshd[31317]: Failed password for invalid user user2 from 68.34.15.8 port 53658 ssh2 Feb 22 05:55:04 h1745522 sshd[31445]: Invalid user alberto from 68.34.15.8 port 50070 ... |
2020-02-22 13:14:01 |
| 222.186.30.248 | attack | Feb 21 19:08:50 debian sshd[16409]: Unable to negotiate with 222.186.30.248 port 49553: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Feb 22 00:28:12 debian sshd[695]: Unable to negotiate with 222.186.30.248 port 15846: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-02-22 13:34:44 |
| 5.135.185.27 | attackspambots | Feb 21 19:03:39 server sshd\[19020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3290539.ip-5-135-185.eu user=root Feb 21 19:03:41 server sshd\[19020\]: Failed password for root from 5.135.185.27 port 37638 ssh2 Feb 22 07:54:07 server sshd\[10822\]: Invalid user fabian from 5.135.185.27 Feb 22 07:54:07 server sshd\[10822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3290539.ip-5-135-185.eu Feb 22 07:54:09 server sshd\[10822\]: Failed password for invalid user fabian from 5.135.185.27 port 41384 ssh2 ... |
2020-02-22 13:45:33 |
| 46.249.123.130 | attackspam | Feb 22 05:54:55 h2177944 kernel: \[5545131.027565\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=46.249.123.130 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=34608 DF PROTO=TCP SPT=57995 DPT=441 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 22 05:54:55 h2177944 kernel: \[5545131.027579\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=46.249.123.130 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=34608 DF PROTO=TCP SPT=57995 DPT=441 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 22 05:54:56 h2177944 kernel: \[5545132.021355\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=46.249.123.130 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=34609 DF PROTO=TCP SPT=57995 DPT=441 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 22 05:54:56 h2177944 kernel: \[5545132.021369\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=46.249.123.130 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=34609 DF PROTO=TCP SPT=57995 DPT=441 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 22 05:54:58 h2177944 kernel: \[5545134.022104\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=46.249.123.130 DST |
2020-02-22 13:18:28 |
| 117.230.181.17 | attack | 1582347260 - 02/22/2020 05:54:20 Host: 117.230.181.17/117.230.181.17 Port: 445 TCP Blocked |
2020-02-22 13:41:01 |
| 222.186.173.183 | attackbots | Feb 22 06:44:19 ns381471 sshd[30765]: Failed password for root from 222.186.173.183 port 55862 ssh2 Feb 22 06:44:22 ns381471 sshd[30765]: Failed password for root from 222.186.173.183 port 55862 ssh2 |
2020-02-22 13:46:02 |
| 220.167.161.200 | attackbots | Feb 22 06:14:30 dedicated sshd[26795]: Invalid user weizeding from 220.167.161.200 port 53154 Feb 22 06:14:30 dedicated sshd[26795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.167.161.200 Feb 22 06:14:30 dedicated sshd[26795]: Invalid user weizeding from 220.167.161.200 port 53154 Feb 22 06:14:31 dedicated sshd[26795]: Failed password for invalid user weizeding from 220.167.161.200 port 53154 ssh2 Feb 22 06:17:00 dedicated sshd[27245]: Invalid user opton from 220.167.161.200 port 37238 |
2020-02-22 13:30:07 |
| 218.92.0.184 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root Failed password for root from 218.92.0.184 port 10476 ssh2 Failed password for root from 218.92.0.184 port 10476 ssh2 Failed password for root from 218.92.0.184 port 10476 ssh2 Failed password for root from 218.92.0.184 port 10476 ssh2 |
2020-02-22 13:09:06 |
| 222.186.31.83 | attack | Feb 22 06:13:13 MK-Soft-VM5 sshd[31338]: Failed password for root from 222.186.31.83 port 38472 ssh2 Feb 22 06:13:17 MK-Soft-VM5 sshd[31338]: Failed password for root from 222.186.31.83 port 38472 ssh2 ... |
2020-02-22 13:17:00 |