City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 8.128.0.0 - 8.191.255.255
CIDR: 8.128.0.0/10
NetName: APNIC
NetHandle: NET-8-128-0-0-1
Parent: NET8 (NET-8-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2018-04-24
Updated: 2018-04-24
Ref: https://rdap.arin.net/registry/ip/8.128.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '8.160.0.0 - 8.191.255.255'
% Abuse contact for '8.160.0.0 - 8.191.255.255' is 'abuse@alibaba-inc.com'
inetnum: 8.160.0.0 - 8.191.255.255
netname: ALICLOUD
descr: Aliyun Computing Co.LTD
country: CN
admin-c: ASEP1-AP
tech-c: ASEP1-AP
abuse-c: AA1926-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-ASEPL-SG
mnt-irt: IRT-ASEPL-SG
last-modified: 2021-04-14T01:11:44Z
source: APNIC
irt: IRT-ASEPL-SG
address: 1 Raffles Place
e-mail: abuse@alibaba-inc.com
abuse-mailbox: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
auth: # Filtered
remarks: abuse@alibaba-inc.com was validated on 2025-12-09
mnt-by: MAINT-ASEPL-SG
last-modified: 2025-12-09T07:58:21Z
source: APNIC
role: ABUSE ASEPLSG
country: ZZ
address: 1 Raffles Place
phone: +000000000
e-mail: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
nic-hdl: AA1926-AP
remarks: Generated from irt object IRT-ASEPL-SG
remarks: abuse@alibaba-inc.com was validated on 2025-12-09
abuse-mailbox: abuse@alibaba-inc.com
mnt-by: APNIC-ABUSE
last-modified: 2025-12-09T07:58:36Z
source: APNIC
role: Alibabacom Singapore E-Commerce Private Limited a
address: 1 Raffles Place #59-00 One Raffles Place, Tower One Singapore, Singapore
country: SG
phone: +86-571-85022088
fax-no: +86-571-85022088
e-mail: abuse@alibaba-inc.com
admin-c: ASEP1-AP
tech-c: ASEP1-AP
nic-hdl: ASEP1-AP
mnt-by: MAINT-ASEPL-SG
last-modified: 2025-07-01T06:25:24Z
source: APNIC
% Information related to '8.163.63.0/24AS37963'
route: 8.163.63.0/24
origin: AS37963
descr: Alibaba.com Singapore E-Commerce Private Limited
8 Shenton Way, #45-01 AXA Tower, Singapore 068811
mnt-by: MAINT-ASEPL-SG
last-modified: 2020-02-25T10:54:37Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 8.163.63.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;8.163.63.8. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040300 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 19:00:07 CST 2026
;; MSG SIZE rcvd: 103Host 8.63.163.8.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.63.163.8.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.48.192.48 | attackbots | 2020-06-14T17:40:29.974101linuxbox-skyline sshd[389753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.192.48 user=root 2020-06-14T17:40:31.916487linuxbox-skyline sshd[389753]: Failed password for root from 103.48.192.48 port 48254 ssh2 ... |
2020-06-15 08:28:42 |
| 207.180.227.17 | attack | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-06-15 08:04:52 |
| 34.67.145.173 | attackbotsspam | Jun 15 02:36:49 gw1 sshd[1667]: Failed password for root from 34.67.145.173 port 39220 ssh2 ... |
2020-06-15 08:40:55 |
| 104.243.19.63 | attackbotsspam | WordPress wp-login brute force :: 104.243.19.63 0.108 BYPASS [14/Jun/2020:21:24:50 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-06-15 08:32:53 |
| 194.13.82.80 | attackbotsspam | 2020-06-15T03:20:46.585349snf-827550 sshd[27861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v2202004120265116398.powersrv.de 2020-06-15T03:20:46.568905snf-827550 sshd[27861]: Invalid user hvu from 194.13.82.80 port 36700 2020-06-15T03:20:48.676353snf-827550 sshd[27861]: Failed password for invalid user hvu from 194.13.82.80 port 36700 ssh2 ... |
2020-06-15 08:21:58 |
| 208.86.213.15 | attackspambots | Lines containing failures of 208.86.213.15 Jun 14 01:08:04 jarvis sshd[31461]: Invalid user gui from 208.86.213.15 port 57791 Jun 14 01:08:04 jarvis sshd[31461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.86.213.15 Jun 14 01:08:07 jarvis sshd[31461]: Failed password for invalid user gui from 208.86.213.15 port 57791 ssh2 Jun 14 01:08:08 jarvis sshd[31461]: Received disconnect from 208.86.213.15 port 57791:11: Bye Bye [preauth] Jun 14 01:08:08 jarvis sshd[31461]: Disconnected from invalid user gui 208.86.213.15 port 57791 [preauth] Jun 14 01:14:56 jarvis sshd[31937]: Invalid user pi from 208.86.213.15 port 36185 Jun 14 01:14:56 jarvis sshd[31937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.86.213.15 Jun 14 01:14:59 jarvis sshd[31937]: Failed password for invalid user pi from 208.86.213.15 port 36185 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=208.86.21 |
2020-06-15 08:00:46 |
| 139.198.5.79 | attackbotsspam | Jun 15 07:25:13 localhost sshd[2216238]: Invalid user sidney from 139.198.5.79 port 40544 ... |
2020-06-15 08:09:31 |
| 23.89.247.152 | attackspam | Automatic report - Banned IP Access |
2020-06-15 08:21:27 |
| 45.143.221.53 | attackbotsspam | [H1] Blocked by UFW |
2020-06-15 08:19:18 |
| 103.67.235.104 | attack | 2020-06-14T23:24:25+02:00 |
2020-06-15 08:18:50 |
| 49.232.48.129 | attack | Jun 15 00:48:09 mail sshd\[22076\]: Invalid user awx from 49.232.48.129 Jun 15 00:48:09 mail sshd\[22076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.48.129 Jun 15 00:48:12 mail sshd\[22076\]: Failed password for invalid user awx from 49.232.48.129 port 54620 ssh2 ... |
2020-06-15 08:04:19 |
| 150.109.77.17 | attackbotsspam | Jun 15 00:08:47 saturn sshd[174547]: Invalid user mdo from 150.109.77.17 port 53272 Jun 15 00:08:50 saturn sshd[174547]: Failed password for invalid user mdo from 150.109.77.17 port 53272 ssh2 Jun 15 00:12:51 saturn sshd[174697]: Invalid user plo from 150.109.77.17 port 60010 ... |
2020-06-15 08:03:12 |
| 222.186.175.167 | attack | 2020-06-15T03:30:33.755158afi-git.jinr.ru sshd[8958]: Failed password for root from 222.186.175.167 port 63036 ssh2 2020-06-15T03:30:36.810051afi-git.jinr.ru sshd[8958]: Failed password for root from 222.186.175.167 port 63036 ssh2 2020-06-15T03:30:40.893903afi-git.jinr.ru sshd[8958]: Failed password for root from 222.186.175.167 port 63036 ssh2 2020-06-15T03:30:40.894056afi-git.jinr.ru sshd[8958]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 63036 ssh2 [preauth] 2020-06-15T03:30:40.894073afi-git.jinr.ru sshd[8958]: Disconnecting: Too many authentication failures [preauth] ... |
2020-06-15 08:33:53 |
| 190.167.16.241 | attackspambots | Jun 14 21:46:53 XXX sshd[40321]: Invalid user user from 190.167.16.241 port 56880 |
2020-06-15 08:41:51 |
| 222.186.15.62 | attack | 2020-06-15T03:25:06.597595lavrinenko.info sshd[14203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root 2020-06-15T03:25:08.378336lavrinenko.info sshd[14203]: Failed password for root from 222.186.15.62 port 49536 ssh2 2020-06-15T03:25:06.597595lavrinenko.info sshd[14203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root 2020-06-15T03:25:08.378336lavrinenko.info sshd[14203]: Failed password for root from 222.186.15.62 port 49536 ssh2 2020-06-15T03:25:12.252941lavrinenko.info sshd[14203]: Failed password for root from 222.186.15.62 port 49536 ssh2 ... |
2020-06-15 08:35:16 |