City: Hangzhou
Region: Zhejiang
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 47.98.0.0 - 47.112.255.255
CIDR: 47.98.0.0/15, 47.100.0.0/14, 47.112.0.0/16, 47.104.0.0/13
NetName: APNIC
NetHandle: NET-47-98-0-0-1
Parent: NET47 (NET-47-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2015-04-01
Updated: 2015-04-01
Ref: https://rdap.arin.net/registry/ip/47.98.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '47.98.0.0 - 47.99.255.255'
% Abuse contact for '47.98.0.0 - 47.99.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 47.98.0.0 - 47.99.255.255
netname: ALISOFT
descr: Aliyun Computing Co., LTD
descr: 5F, Builing D, the West Lake International Plaza of S&T
descr: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
country: CN
admin-c: ZM1015-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
tech-c: ZM875-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALISOFT-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:58:18Z
source: APNIC
irt: IRT-ALISOFT-CN
address: No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
admin-c: ZM877-AP
tech-c: ZM877-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:07Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Li Jia
address: NO.969 West Wen Yi Road, Yu Hang District, Hangzhou
country: CN
phone: +86-0571-85022088
e-mail: jiali.jl@alibaba-inc.com
nic-hdl: ZM1015-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:12:42Z
source: APNIC
person: Guoxin Gao
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
fax-no: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM875-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2014-07-30T01:56:01Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '47.99.0.0/16AS45102'
route: 47.99.0.0/16
descr: Aliyun Computing Co., LTD
country: CN
origin: AS45102
mnt-by: MAINT-CNNIC-AP
last-modified: 2018-01-19T08:12:02Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.99.115.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59397
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.99.115.249. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081101 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 10:00:18 CST 2026
;; MSG SIZE rcvd: 106Host 249.115.99.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.115.99.47.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.246 | attackspambots | [H1] SSH login failed |
2020-08-11 12:50:22 |
| 178.32.225.198 | attackspambots | port |
2020-08-11 12:40:06 |
| 167.99.66.193 | attackbots | $f2bV_matches |
2020-08-11 12:36:37 |
| 212.33.203.201 | attackbotsspam | 2020-08-11T03:57:48.542842abusebot-4.cloudsearch.cf sshd[28967]: Invalid user ansible from 212.33.203.201 port 40586 2020-08-11T03:57:48.548905abusebot-4.cloudsearch.cf sshd[28967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.203.201 2020-08-11T03:57:48.542842abusebot-4.cloudsearch.cf sshd[28967]: Invalid user ansible from 212.33.203.201 port 40586 2020-08-11T03:57:50.928899abusebot-4.cloudsearch.cf sshd[28967]: Failed password for invalid user ansible from 212.33.203.201 port 40586 ssh2 2020-08-11T03:57:58.515185abusebot-4.cloudsearch.cf sshd[28970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.33.203.201 user=root 2020-08-11T03:58:00.268134abusebot-4.cloudsearch.cf sshd[28970]: Failed password for root from 212.33.203.201 port 47044 ssh2 2020-08-11T03:58:07.342200abusebot-4.cloudsearch.cf sshd[28973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... |
2020-08-11 12:16:20 |
| 218.92.0.175 | attack | Aug 11 06:19:16 santamaria sshd\[22938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Aug 11 06:19:18 santamaria sshd\[22938\]: Failed password for root from 218.92.0.175 port 35686 ssh2 Aug 11 06:19:21 santamaria sshd\[22938\]: Failed password for root from 218.92.0.175 port 35686 ssh2 ... |
2020-08-11 12:22:26 |
| 104.131.79.236 | attackbotsspam | 2020-08-11T05:57[Censored Hostname] sshd[20284]: Invalid user fake from 104.131.79.236 port 58388 2020-08-11T05:57[Censored Hostname] sshd[20284]: Failed password for invalid user fake from 104.131.79.236 port 58388 ssh2 2020-08-11T05:57[Censored Hostname] sshd[20332]: Invalid user admin from 104.131.79.236 port 60690[...] |
2020-08-11 12:27:10 |
| 137.74.206.80 | attackbots | Attempting to access Wordpress login on a honeypot or private system. |
2020-08-11 12:24:28 |
| 77.247.178.200 | attack | [2020-08-11 00:18:38] NOTICE[1185][C-00000b94] chan_sip.c: Call from '' (77.247.178.200:63134) to extension '011442037693601' rejected because extension not found in context 'public'. [2020-08-11 00:18:38] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-11T00:18:38.661-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037693601",SessionID="0x7f10c40edb38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.178.200/63134",ACLName="no_extension_match" [2020-08-11 00:18:54] NOTICE[1185][C-00000b95] chan_sip.c: Call from '' (77.247.178.200:50013) to extension '011442037693601' rejected because extension not found in context 'public'. [2020-08-11 00:18:54] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-11T00:18:54.112-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037693601",SessionID="0x7f10c40627c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ... |
2020-08-11 12:32:04 |
| 220.85.104.202 | attack | $f2bV_matches |
2020-08-11 12:23:48 |
| 118.24.114.205 | attack | Aug 10 23:57:20 mail sshd\[59911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.205 user=root ... |
2020-08-11 12:45:23 |
| 187.18.89.103 | attackspam | 2020-08-11T05:48:12.540834mail.broermann.family sshd[2483]: Failed password for root from 187.18.89.103 port 43574 ssh2 2020-08-11T05:52:59.397395mail.broermann.family sshd[2664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=r282-pr-itapetininga.ibys.com.br user=root 2020-08-11T05:53:01.436819mail.broermann.family sshd[2664]: Failed password for root from 187.18.89.103 port 55512 ssh2 2020-08-11T05:57:39.621707mail.broermann.family sshd[2859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=r282-pr-itapetininga.ibys.com.br user=root 2020-08-11T05:57:41.099286mail.broermann.family sshd[2859]: Failed password for root from 187.18.89.103 port 39222 ssh2 ... |
2020-08-11 12:32:46 |
| 211.144.68.227 | attackspambots | SSH Brute Force |
2020-08-11 12:16:34 |
| 167.99.172.181 | attackbots | SSH Brute Force |
2020-08-11 12:40:37 |
| 5.188.86.178 | attackbotsspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-11T03:50:50Z and 2020-08-11T03:57:57Z |
2020-08-11 12:26:05 |
| 35.222.207.7 | attackspambots | $f2bV_matches |
2020-08-11 12:15:45 |