Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Beijing

Region: Beijing

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       8.128.0.0 - 8.191.255.255
CIDR:           8.128.0.0/10
NetName:        APNIC
NetHandle:      NET-8-128-0-0-1
Parent:         NET8 (NET-8-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2018-04-24
Updated:        2018-04-24
Ref:            https://rdap.arin.net/registry/ip/8.128.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois://whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  https://apps.db.ripe.net/db-web-ui/query

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '8.128.0.0 - 8.159.255.255'

% Abuse contact for '8.128.0.0 - 8.159.255.255' is 'abuse@alibaba-inc.com'

inetnum:        8.128.0.0 - 8.159.255.255
netname:        ALICLOUD
descr:          Aliyun Computing Co.LTD
country:        CN
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
abuse-c:        AA1926-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-ASEPL-SG
mnt-irt:        IRT-ASEPL-SG
last-modified:  2021-04-14T01:11:45Z
source:         APNIC

irt:            IRT-ASEPL-SG
address:        1 Raffles Place
e-mail:         abuse@alibaba-inc.com
abuse-mailbox:  abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
auth:           # Filtered
remarks:        abuse@alibaba-inc.com was validated on 2025-04-14
mnt-by:         MAINT-ASEPL-SG
last-modified:  2025-09-04T07:13:51Z
source:         APNIC

role:           ABUSE ASEPLSG
country:        ZZ
address:        1 Raffles Place # 59-00 One Raffles Place, Tower One Singapore, Singapore
phone:          +000000000
e-mail:         abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
nic-hdl:        AA1926-AP
remarks:        Generated from irt object IRT-ASEPL-SG
remarks:        abuse@alibaba-inc.com was validated on 2025-04-14
abuse-mailbox:  abuse@alibaba-inc.com
mnt-by:         APNIC-ABUSE
last-modified:  2025-04-14T07:19:41Z
source:         APNIC

role:           Alibabacom Singapore E-Commerce Private Limited a
address:        1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore
country:        SG
phone:          +86-571-85022088
fax-no:         +86-571-85022088
e-mail:         abuse@alibaba-inc.com
admin-c:        ASEP1-AP
tech-c:         ASEP1-AP
nic-hdl:        ASEP1-AP
mnt-by:         MAINT-ASEPL-SG
last-modified:  2025-07-01T06:25:24Z
source:         APNIC

% Information related to '8.140.17.0/24AS37963'

route:          8.140.17.0/24
origin:         AS37963
descr:          Alibaba.com Singapore E-Commerce Private Limited
                8 Shenton Way, #45-01 AXA Tower, Singapore 068811
mnt-by:         MAINT-ASEPL-SG
last-modified:  2020-02-25T09:38:41Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.140.17.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;8.140.17.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025092300 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 23 15:56:48 CST 2025
;; MSG SIZE  rcvd: 104
Host info
Host 54.17.140.8.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.17.140.8.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
209.17.97.58 attackspam
EventTime:Sat Aug 10 22:22:17 AEST 2019,EventName:Client denied: configuration,TargetDataNamespace:/,TargetDataContainer:srv/www/upperbay.info/site/,TargetDataName:E_NULL,SourceIP:209.17.97.58,VendorOutcomeCode:E_NULL,InitiatorServiceName:59356
2019-08-10 21:22:49
85.72.43.45 attackbots
Automatic report - Port Scan Attack
2019-08-10 21:53:23
188.68.76.38 attack
Lines containing failures of 188.68.76.38


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=188.68.76.38
2019-08-10 21:35:52
64.94.45.59 attackspam
ICMP MP Probe, Scan -
2019-08-10 21:22:18
179.162.155.205 attackspambots
Automatic report - Port Scan Attack
2019-08-10 21:49:56
160.153.154.2 attack
xmlrpc
2019-08-10 21:12:48
41.35.17.72 attackspam
Aug 10 13:39:51 pl3server sshd[937591]: reveeclipse mapping checking getaddrinfo for host-41.35.17.72.tedata.net [41.35.17.72] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug 10 13:39:51 pl3server sshd[937591]: Invalid user admin from 41.35.17.72
Aug 10 13:39:51 pl3server sshd[937591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.35.17.72
Aug 10 13:39:52 pl3server sshd[937591]: Failed password for invalid user admin from 41.35.17.72 port 53709 ssh2
Aug 10 13:39:53 pl3server sshd[937591]: Connection closed by 41.35.17.72 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.35.17.72
2019-08-10 21:14:42
121.141.5.199 attackspambots
2019-08-10T13:24:12.793508abusebot-4.cloudsearch.cf sshd\[20069\]: Invalid user icecast from 121.141.5.199 port 35550
2019-08-10 21:56:01
47.98.5.236 attack
TCP SYN-ACK with data, PTR: PTR record not found
2019-08-10 21:20:42
23.6.113.181 attackspambots
ICMP MP Probe, Scan -
2019-08-10 21:40:55
43.227.66.159 attackspam
Aug 10 14:22:50 microserver sshd[13198]: Invalid user guest from 43.227.66.159 port 40872
Aug 10 14:22:50 microserver sshd[13198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.66.159
Aug 10 14:22:52 microserver sshd[13198]: Failed password for invalid user guest from 43.227.66.159 port 40872 ssh2
Aug 10 14:27:57 microserver sshd[13899]: Invalid user abdul from 43.227.66.159 port 58558
Aug 10 14:27:57 microserver sshd[13899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.66.159
Aug 10 14:43:10 microserver sshd[15932]: Invalid user arya from 43.227.66.159 port 55320
Aug 10 14:43:10 microserver sshd[15932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.66.159
Aug 10 14:43:13 microserver sshd[15932]: Failed password for invalid user arya from 43.227.66.159 port 55320 ssh2
Aug 10 14:48:12 microserver sshd[16577]: Invalid user kjayroe from 43.227.66.159 port 44752
Aug 1
2019-08-10 21:37:45
115.75.104.128 attackspam
ECShop Remote Code Execution Vulnerability, PTR: PTR record not found
2019-08-10 21:19:07
51.77.192.132 attackbots
Aug 10 15:08:55 server sshd[56347]: Failed password for invalid user ftp-user from 51.77.192.132 port 55182 ssh2
Aug 10 15:17:17 server sshd[57145]: Failed password for invalid user private from 51.77.192.132 port 58498 ssh2
Aug 10 15:21:12 server sshd[57474]: Failed password for root from 51.77.192.132 port 57796 ssh2
2019-08-10 21:55:38
14.116.251.29 attackbotsspam
Jan  3 14:56:41 motanud sshd\[6999\]: Invalid user pv from 14.116.251.29 port 58494
Jan  3 14:56:41 motanud sshd\[6999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.251.29
Jan  3 14:56:42 motanud sshd\[6999\]: Failed password for invalid user pv from 14.116.251.29 port 58494 ssh2
2019-08-10 21:15:06
216.245.192.242 attack
Aug 10 14:23:00 * sshd[10893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.245.192.242
Aug 10 14:23:02 * sshd[10893]: Failed password for invalid user postgres from 216.245.192.242 port 36298 ssh2
2019-08-10 21:12:13

Recently Reported IPs

204.185.94.101 20.171.207.67 66.132.153.134 106.102.142.11
146.75.187.2 1.193.108.1 176.97.210.9 202.100.206.15
103.151.173.119 8.140.52.227 111.37.202.6 182.43.101.80
13.112.46.178 13.112.46.143 169.150.242.16 2403:6200:8820:e7d:6d61:e400:2b4a:dc3c
172.30.4.172 103.252.89.160 103.171.161.94 147.185.132.179