City: Shanghai
Region: Shanghai
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 8.128.0.0 - 8.191.255.255
CIDR: 8.128.0.0/10
NetName: APNIC
NetHandle: NET-8-128-0-0-1
Parent: NET8 (NET-8-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2018-04-24
Updated: 2018-04-24
Ref: https://rdap.arin.net/registry/ip/8.128.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '8.128.0.0 - 8.159.255.255'
% Abuse contact for '8.128.0.0 - 8.159.255.255' is 'abuse@alibaba-inc.com'
inetnum: 8.128.0.0 - 8.159.255.255
netname: ALICLOUD
descr: Aliyun Computing Co.LTD
country: CN
admin-c: ASEP1-AP
tech-c: ASEP1-AP
abuse-c: AA1926-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-ASEPL-SG
mnt-irt: IRT-ASEPL-SG
last-modified: 2021-04-14T01:11:45Z
source: APNIC
irt: IRT-ASEPL-SG
address: 1 Raffles Place
e-mail: abuse@alibaba-inc.com
abuse-mailbox: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
auth: # Filtered
remarks: abuse@alibaba-inc.com was validated on 2025-12-09
mnt-by: MAINT-ASEPL-SG
last-modified: 2025-12-09T07:58:21Z
source: APNIC
role: ABUSE ASEPLSG
country: ZZ
address: 1 Raffles Place
phone: +000000000
e-mail: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
nic-hdl: AA1926-AP
remarks: Generated from irt object IRT-ASEPL-SG
remarks: abuse@alibaba-inc.com was validated on 2025-12-09
abuse-mailbox: abuse@alibaba-inc.com
mnt-by: APNIC-ABUSE
last-modified: 2025-12-09T07:58:36Z
source: APNIC
role: Alibabacom Singapore E-Commerce Private Limited a
address: 1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore
country: SG
phone: +86-571-85022088
fax-no: +86-571-85022088
e-mail: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
nic-hdl: ASEP1-AP
mnt-by: MAINT-ASEPL-SG
last-modified: 2025-07-01T06:25:24Z
source: APNIC
% Information related to '8.159.137.0/24AS37963'
route: 8.159.137.0/24
origin: AS37963
descr: Alibaba.com Singapore E-Commerce Private Limited
8 Shenton Way, #45-01 AXA Tower, Singapore 068811
mnt-by: MAINT-ASEPL-SG
last-modified: 2020-02-25T10:43:50Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.159.137.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37436
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;8.159.137.112. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031802 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 09:40:24 CST 2026
;; MSG SIZE rcvd: 106
Host 112.137.159.8.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 112.137.159.8.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.251.242.141 | attackspam | Invalid user test10 from 101.251.242.141 port 42218 |
2020-04-20 03:11:55 |
| 168.128.86.35 | attackbotsspam | $f2bV_matches |
2020-04-20 03:28:43 |
| 180.76.151.189 | attackbotsspam | Apr 16 04:52:07 lock-38 sshd[1063285]: Failed password for invalid user juan2 from 180.76.151.189 port 40406 ssh2 Apr 16 05:03:35 lock-38 sshd[1063585]: Invalid user yang from 180.76.151.189 port 53936 Apr 16 05:03:35 lock-38 sshd[1063585]: Invalid user yang from 180.76.151.189 port 53936 Apr 16 05:03:35 lock-38 sshd[1063585]: Failed password for invalid user yang from 180.76.151.189 port 53936 ssh2 Apr 16 05:07:34 lock-38 sshd[1063685]: Invalid user luccisano from 180.76.151.189 port 46856 ... |
2020-04-20 03:27:00 |
| 121.162.60.159 | attack | Apr 15 21:00:11 lock-38 sshd[1050063]: Invalid user bill from 121.162.60.159 port 33594 Apr 15 21:00:11 lock-38 sshd[1050063]: Failed password for invalid user bill from 121.162.60.159 port 33594 ssh2 Apr 15 21:04:45 lock-38 sshd[1050162]: Invalid user yang from 121.162.60.159 port 51290 Apr 15 21:04:45 lock-38 sshd[1050162]: Invalid user yang from 121.162.60.159 port 51290 Apr 15 21:04:45 lock-38 sshd[1050162]: Failed password for invalid user yang from 121.162.60.159 port 51290 ssh2 ... |
2020-04-20 03:37:36 |
| 182.61.109.24 | attack | 5x Failed Password |
2020-04-20 03:25:24 |
| 126.73.98.250 | attackbots | DATE:2020-04-19 17:49:06, IP:126.73.98.250, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-20 03:07:46 |
| 142.93.232.102 | attack | 2020-04-19T18:49:30.643776homeassistant sshd[32271]: Invalid user mk from 142.93.232.102 port 35988 2020-04-19T18:49:30.652867homeassistant sshd[32271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 ... |
2020-04-20 03:05:14 |
| 162.243.55.188 | attack | 2020-04-19T19:54:16.399812ns386461 sshd\[1322\]: Invalid user da from 162.243.55.188 port 33665 2020-04-19T19:54:16.404422ns386461 sshd\[1322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.55.188 2020-04-19T19:54:18.522878ns386461 sshd\[1322\]: Failed password for invalid user da from 162.243.55.188 port 33665 ssh2 2020-04-19T20:12:38.859849ns386461 sshd\[18602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.55.188 user=root 2020-04-19T20:12:40.594381ns386461 sshd\[18602\]: Failed password for root from 162.243.55.188 port 38116 ssh2 ... |
2020-04-20 03:29:34 |
| 122.144.198.9 | attackspam | Invalid user hg from 122.144.198.9 port 26295 |
2020-04-20 03:36:51 |
| 79.143.44.122 | attack | 20 attempts against mh-ssh on cloud |
2020-04-20 03:13:38 |
| 138.197.175.236 | attack | Invalid user nx from 138.197.175.236 port 53152 |
2020-04-20 03:35:09 |
| 103.242.56.189 | attackspambots | Bruteforce detected by fail2ban |
2020-04-20 03:11:31 |
| 121.229.49.85 | attack | Apr 19 19:05:38 ift sshd\[7928\]: Invalid user postgres from 121.229.49.85Apr 19 19:05:40 ift sshd\[7928\]: Failed password for invalid user postgres from 121.229.49.85 port 49428 ssh2Apr 19 19:08:15 ift sshd\[8155\]: Invalid user cvsroot from 121.229.49.85Apr 19 19:08:17 ift sshd\[8155\]: Failed password for invalid user cvsroot from 121.229.49.85 port 50156 ssh2Apr 19 19:10:32 ift sshd\[8554\]: Failed password for mysql from 121.229.49.85 port 50878 ssh2 ... |
2020-04-20 03:08:12 |
| 164.68.110.24 | attack | Apr 19 19:56:40 host5 sshd[9351]: Invalid user up from 164.68.110.24 port 55514 ... |
2020-04-20 03:03:47 |
| 141.98.81.107 | attackbots | Apr 19 14:14:30 firewall sshd[26858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.107 Apr 19 14:14:30 firewall sshd[26858]: Invalid user admin from 141.98.81.107 Apr 19 14:14:32 firewall sshd[26858]: Failed password for invalid user admin from 141.98.81.107 port 42701 ssh2 ... |
2020-04-20 03:32:35 |