City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '59.82.0.0 - 59.82.255.255'
% Abuse contact for '59.82.0.0 - 59.82.255.255' is 'didong.jc@alibaba-inc.com'
inetnum: 59.82.0.0 - 59.82.255.255
netname: ALIBABA-CN-NET
descr: Hangzhou Alibaba Advertising Co.,Ltd.
descr: No.699, Wangshang RD., Hangzhou, China
country: CN
admin-c: ZM678-AP
tech-c: ZM877-AP
tech-c: ZM876-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-ALIBABA-CN-NET-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:58:21Z
source: APNIC
irt: IRT-ALIBABA-CN-NET-CN
address: No.699, Wangshang RD., Hangzhou, China
e-mail: didong.jc@alibaba-inc.com
abuse-mailbox: didong.jc@alibaba-inc.com
auth: # Filtered
admin-c: ZM678-AP
tech-c: ZM678-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-09-05T23:38:38Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Shuo Yu
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022600
e-mail: anti-spam@list.alibaba-inc.com
nic-hdl: ZM678-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-04-13T23:21:57Z
source: APNIC
person: security trouble
e-mail: abuse@alibaba-inc.com
address: 5th,floor,Building D,the West Lake International Plaza of S&T,391#Wen??r Road
address: Hangzhou, Zhejiang, China
phone: +86-0571-85022600
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: ZM876-AP
last-modified: 2025-07-01T07:06:11Z
source: APNIC
person: Guowei Pan
address: 5F, Builing D, the West Lake International Plaza of S&T
address: No.391 Wen'er Road, Hangzhou City
address: Zhejiang, China, 310099
country: CN
phone: +86-0571-85022088-30763
fax-no: +86-0571-85022600
e-mail: abuse@alibaba-inc.com
nic-hdl: ZM877-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-07-01T07:05:46Z
source: APNIC
% Information related to '59.82.83.0/24AS37963'
route: 59.82.83.0/24
origin: AS37963
descr: China Internet Network Information Center
Floor1, Building No.1 C/-Chinese Academy of Sciences
4, South 4th Street
Haidian District,
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:17:28Z
source: APNIC
% Information related to '59.82.83.0/24AS45102'
route: 59.82.83.0/24
origin: AS45102
descr: China Internet Network Information Center
Floor1, Building No.1 C/-Chinese Academy of Sciences
4, South 4th Street
Haidian District,
mnt-by: MAINT-CNNIC-AP
last-modified: 2020-02-18T01:19:20Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.82.83.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10232
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;59.82.83.101. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025102301 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 24 10:00:57 CST 2025
;; MSG SIZE rcvd: 105Host 101.83.82.59.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 101.83.82.59.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.169.10.50 | attackbots | Port probing on unauthorized port 445 |
2020-06-17 22:08:33 |
| 177.139.136.73 | attackspam | Brute force attempt |
2020-06-17 21:42:44 |
| 58.215.9.154 | attack | Port Scan detected! ... |
2020-06-17 21:51:27 |
| 111.67.199.38 | attackspam | Jun 17 15:50:54 ns381471 sshd[29102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.199.38 Jun 17 15:50:56 ns381471 sshd[29102]: Failed password for invalid user ttf from 111.67.199.38 port 55292 ssh2 |
2020-06-17 22:11:40 |
| 165.227.200.236 | attack | Jun 17 14:00:24 inter-technics sshd[8264]: Invalid user change from 165.227.200.236 port 42072 Jun 17 14:00:24 inter-technics sshd[8264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.200.236 Jun 17 14:00:24 inter-technics sshd[8264]: Invalid user change from 165.227.200.236 port 42072 Jun 17 14:00:26 inter-technics sshd[8264]: Failed password for invalid user change from 165.227.200.236 port 42072 ssh2 Jun 17 14:03:59 inter-technics sshd[8455]: Invalid user oracle from 165.227.200.236 port 45166 ... |
2020-06-17 21:50:12 |
| 122.116.253.120 | attack | port scan and connect, tcp 23 (telnet) |
2020-06-17 22:13:28 |
| 37.139.20.6 | attackbotsspam | Jun 17 15:44:51 ns381471 sshd[28795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.20.6 Jun 17 15:44:53 ns381471 sshd[28795]: Failed password for invalid user monte from 37.139.20.6 port 50301 ssh2 |
2020-06-17 21:45:45 |
| 187.2.11.82 | attackbotsspam | 2020-06-17T11:57:47.133713dmca.cloudsearch.cf sshd[11995]: Invalid user ohm from 187.2.11.82 port 40625 2020-06-17T11:57:47.139213dmca.cloudsearch.cf sshd[11995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.2.11.82 2020-06-17T11:57:47.133713dmca.cloudsearch.cf sshd[11995]: Invalid user ohm from 187.2.11.82 port 40625 2020-06-17T11:57:49.284566dmca.cloudsearch.cf sshd[11995]: Failed password for invalid user ohm from 187.2.11.82 port 40625 ssh2 2020-06-17T12:03:58.533154dmca.cloudsearch.cf sshd[12595]: Invalid user zwj from 187.2.11.82 port 38204 2020-06-17T12:03:58.544635dmca.cloudsearch.cf sshd[12595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.2.11.82 2020-06-17T12:03:58.533154dmca.cloudsearch.cf sshd[12595]: Invalid user zwj from 187.2.11.82 port 38204 2020-06-17T12:04:00.288926dmca.cloudsearch.cf sshd[12595]: Failed password for invalid user zwj from 187.2.11.82 port 38204 ssh2 ... |
2020-06-17 21:49:26 |
| 185.176.27.26 | attackbotsspam | scans 17 times in preceeding hours on the ports (in chronological order) 24081 24093 24094 24092 24185 24184 24195 24196 24197 24286 24287 24288 24299 24298 24300 24391 24390 resulting in total of 95 scans from 185.176.27.0/24 block. |
2020-06-17 22:09:44 |
| 183.223.222.141 | attackspambots | 2020-06-17T11:59:18.345444dmca.cloudsearch.cf sshd[12146]: Invalid user bot from 183.223.222.141 port 39020 2020-06-17T11:59:18.351478dmca.cloudsearch.cf sshd[12146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.223.222.141 2020-06-17T11:59:18.345444dmca.cloudsearch.cf sshd[12146]: Invalid user bot from 183.223.222.141 port 39020 2020-06-17T11:59:20.321818dmca.cloudsearch.cf sshd[12146]: Failed password for invalid user bot from 183.223.222.141 port 39020 ssh2 2020-06-17T12:03:43.742436dmca.cloudsearch.cf sshd[12525]: Invalid user rancher from 183.223.222.141 port 49446 2020-06-17T12:03:43.748692dmca.cloudsearch.cf sshd[12525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.223.222.141 2020-06-17T12:03:43.742436dmca.cloudsearch.cf sshd[12525]: Invalid user rancher from 183.223.222.141 port 49446 2020-06-17T12:03:45.764492dmca.cloudsearch.cf sshd[12525]: Failed password for invalid user rancher f ... |
2020-06-17 22:10:00 |
| 218.92.0.219 | attackspam | 2020-06-17T14:22:06.576084shield sshd\[22875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root 2020-06-17T14:22:09.117497shield sshd\[22875\]: Failed password for root from 218.92.0.219 port 40722 ssh2 2020-06-17T14:22:12.176703shield sshd\[22875\]: Failed password for root from 218.92.0.219 port 40722 ssh2 2020-06-17T14:22:14.453531shield sshd\[22875\]: Failed password for root from 218.92.0.219 port 40722 ssh2 2020-06-17T14:22:46.590686shield sshd\[22962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root |
2020-06-17 22:23:21 |
| 120.92.77.201 | attackbotsspam | k+ssh-bruteforce |
2020-06-17 22:09:06 |
| 151.70.220.249 | attackbotsspam | Fail2Ban Ban Triggered SMTP Abuse Attempt |
2020-06-17 22:01:26 |
| 220.189.191.238 | attack | Unauthorized connection attempt from IP address 220.189.191.238 on Port 445(SMB) |
2020-06-17 21:57:07 |
| 49.68.144.98 | attackspambots | Jun 17 13:48:40 mxgate1 postfix/postscreen[9373]: CONNECT from [49.68.144.98]:1864 to [176.31.12.44]:25 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.11 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9378]: addr 49.68.144.98 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9375]: addr 49.68.144.98 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 17 13:48:46 mxgate1 postfix/postscreen[9373]: DNSBL rank 4 for [49.68.144.98]:1864 Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.68.144.98 |
2020-06-17 22:07:22 |