Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       47.92.0.0 - 47.97.255.255
CIDR:           47.96.0.0/15, 47.92.0.0/14
NetName:        APNIC
NetHandle:      NET-47-92-0-0-1
Parent:         NET47 (NET-47-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2015-03-02
Updated:        2015-03-02
Ref:            https://rdap.arin.net/registry/ip/47.92.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '47.92.0.0 - 47.95.255.255'

% Abuse contact for '47.92.0.0 - 47.95.255.255' is 'didong.jc@alibaba-inc.com'

inetnum:        47.92.0.0 - 47.95.255.255
netname:        ALISOFT
descr:          Aliyun Computing Co., LTD
descr:          5F, Builing D, the West Lake International Plaza of S&T
descr:          No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country:        CN
admin-c:        ZM1015-AP
tech-c:         ZM877-AP
tech-c:         ZM876-AP
tech-c:         ZM875-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-ALISOFT-CN
last-modified:  2023-11-28T00:58:17Z
source:         APNIC

irt:            IRT-ALISOFT-CN
address:        No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail:         didong.jc@alibaba-inc.com
abuse-mailbox:  didong.jc@alibaba-inc.com
admin-c:        ZM877-AP
tech-c:         ZM877-AP
auth:           # Filtered
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-18T00:35:07Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Li Jia
address:        NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country:        CN
phone:          +86-0571-85022088
e-mail:         jiali.jl@alibaba-inc.com
nic-hdl:        ZM1015-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-07-01T07:12:42Z
source:         APNIC

person:         Guoxin Gao
address:        5F, Builing D, the West Lake International Plaza of S&T
address:        No.391 Wen'er Road, Hangzhou City
address:        Zhejiang, China, 310099
country:        CN
phone:          +86-0571-85022600
fax-no:         +86-0571-85022600
e-mail:         anti-spam@list.alibaba-inc.com
nic-hdl:        ZM875-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2014-07-30T01:56:01Z
source:         APNIC

person:         security trouble
e-mail:         abuse@alibaba-inc.com
address:        5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address:        Hangzhou, Zhejiang, China
phone:          +86-0571-85022600
country:        CN
mnt-by:         MAINT-CNNIC-AP
nic-hdl:        ZM876-AP
last-modified:  2025-07-01T07:06:11Z
source:         APNIC

person:         Guowei Pan
address:        5F, Builing D, the West Lake International Plaza of S&T
address:        No.391 Wen'er Road, Hangzhou City
address:        Zhejiang, China, 310099
country:        CN
phone:          +86-0571-85022088-30763
fax-no:         +86-0571-85022600
e-mail:         abuse@alibaba-inc.com
nic-hdl:        ZM877-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-07-01T07:05:46Z
source:         APNIC

% Information related to '47.92.0.0/14AS37963'

route:          47.92.0.0/14
descr:          Hangzhou Alibaba Advertising Co.,Ltd.
country:        CN
origin:         AS37963
mnt-by:         MAINT-CNNIC-AP
last-modified:  2019-08-07T23:28:06Z
source:         APNIC

% Information related to '47.92.0.0/14AS45102'

route:          47.92.0.0/14
descr:          Alibaba (US) Technology Co., Ltd.
country:        CN
origin:         AS45102
mnt-by:         MAINT-CNNIC-AP
last-modified:  2019-08-07T23:28:04Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.94.164.88
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53300
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;47.94.164.88.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026062100 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 19:00:05 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 88.164.94.47.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 88.164.94.47.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
39.135.1.156 attackbots
Automatic report - Port Scan
2019-10-17 07:14:02
159.203.190.189 attackbotsspam
Oct 16 23:44:54 vpn01 sshd[12167]: Failed password for root from 159.203.190.189 port 36253 ssh2
...
2019-10-17 06:53:21
49.235.240.202 attack
2019-10-16T22:57:10.832826abusebot.cloudsearch.cf sshd\[4348\]: Invalid user informix from 49.235.240.202 port 53364
2019-10-17 07:24:01
141.98.80.87 attack
Brute force attack stopped by firewall
2019-10-17 07:12:05
140.246.175.68 attackbotsspam
Oct 16 23:34:01 icinga sshd[8369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.175.68
Oct 16 23:34:03 icinga sshd[8369]: Failed password for invalid user tec from 140.246.175.68 port 14394 ssh2
...
2019-10-17 07:17:17
139.155.105.217 attackbotsspam
Oct 16 23:09:43 meumeu sshd[28562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.105.217 
Oct 16 23:09:45 meumeu sshd[28562]: Failed password for invalid user mi from 139.155.105.217 port 32982 ssh2
Oct 16 23:15:05 meumeu sshd[29318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.105.217 
...
2019-10-17 06:56:20
222.186.190.92 attackspam
Oct 17 01:55:18 server sshd\[9079\]: User root from 222.186.190.92 not allowed because listed in DenyUsers
Oct 17 01:55:19 server sshd\[9079\]: Failed none for invalid user root from 222.186.190.92 port 33042 ssh2
Oct 17 01:55:20 server sshd\[9079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92  user=root
Oct 17 01:55:22 server sshd\[9079\]: Failed password for invalid user root from 222.186.190.92 port 33042 ssh2
Oct 17 01:55:27 server sshd\[9079\]: Failed password for invalid user root from 222.186.190.92 port 33042 ssh2
2019-10-17 07:04:30
91.183.149.230 attack
Oct 16 22:22:14 imap-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 175 secs\): user=\, method=PLAIN, rip=91.183.149.230, lip=192.168.100.101, session=\\
Oct 16 22:22:31 imap-login: Info: Disconnected: Inactivity \(no auth attempts in 180 secs\): user=\<\>, rip=91.183.149.230, lip=192.168.100.101, session=\\
Oct 16 22:22:31 imap-login: Info: Disconnected: Inactivity \(no auth attempts in 180 secs\): user=\<\>, rip=91.183.149.230, lip=192.168.100.101, session=\\
Oct 16 22:22:32 imap-login: Info: Disconnected: Inactivity \(no auth attempts in 180 secs\): user=\<\>, rip=91.183.149.230, lip=192.168.100.101, session=\\
Oct 16 22:22:32 imap-login: Info: Disconnected: Inactivity \(no auth attempts in 180 secs\): user=\<\>, rip=91.183.149.230, lip=192.168.100.101, session=\\
Oct 16 23:11:45 imap-login: Info: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\
2019-10-17 07:22:04
45.34.147.162 attackspam
Oct 16 23:46:24 vps01 sshd[6651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.34.147.162
Oct 16 23:46:27 vps01 sshd[6651]: Failed password for invalid user eelet from 45.34.147.162 port 48191 ssh2
2019-10-17 07:20:08
171.67.70.207 attackspambots
SSH Scan
2019-10-17 06:55:06
49.234.17.109 attackbotsspam
2019-10-16T22:49:45.544500abusebot-5.cloudsearch.cf sshd\[28714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.17.109  user=root
2019-10-17 07:13:01
81.22.45.107 attackbotsspam
Oct 17 00:51:55 mc1 kernel: \[2552684.998330\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=41077 PROTO=TCP SPT=48649 DPT=7470 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 17 00:58:39 mc1 kernel: \[2553088.896093\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=60866 PROTO=TCP SPT=48649 DPT=6705 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 17 00:59:13 mc1 kernel: \[2553122.935381\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=859 PROTO=TCP SPT=48649 DPT=7333 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-17 07:01:26
113.87.194.116 attack
(sshd) Failed SSH login from 113.87.194.116 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 16 23:38:29 server2 sshd[8086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.87.194.116  user=root
Oct 16 23:38:32 server2 sshd[8086]: Failed password for root from 113.87.194.116 port 58075 ssh2
Oct 16 23:55:16 server2 sshd[8569]: Invalid user test from 113.87.194.116 port 37276
Oct 16 23:55:18 server2 sshd[8569]: Failed password for invalid user test from 113.87.194.116 port 37276 ssh2
Oct 16 23:59:24 server2 sshd[8636]: Invalid user admin from 113.87.194.116 port 56836
2019-10-17 06:50:16
106.12.209.117 attackspambots
Oct 16 23:03:43 meumeu sshd[27654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.209.117 
Oct 16 23:03:45 meumeu sshd[27654]: Failed password for invalid user devuser from 106.12.209.117 port 56160 ssh2
Oct 16 23:07:50 meumeu sshd[28234]: Failed password for root from 106.12.209.117 port 36392 ssh2
...
2019-10-17 07:27:03
92.119.160.107 attack
Oct 17 00:40:19 mc1 kernel: \[2551988.956421\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=318 PROTO=TCP SPT=48828 DPT=11849 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 17 00:44:14 mc1 kernel: \[2552224.000093\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=58420 PROTO=TCP SPT=48828 DPT=12103 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 17 00:45:22 mc1 kernel: \[2552292.108149\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=65322 PROTO=TCP SPT=48828 DPT=12370 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-17 06:49:55

Recently Reported IPs

221.150.17.44 168.158.162.1 169.214.170.6 91.230.168.121
154.64.240.225 163.227.2.0 5.255.98.183 14.29.237.56
92.204.172.19 20.169.106.57 2606:4700:10::ac43:2613 192.168.31.197
2606:4700:10::6814:6677 38.134.104.24 118.193.37.50 2606:4700:10::6814:8773
64.225.81.195 175.107.211.116 2606:4700:10::6814:8008 2606:4700:10::6816:3594