IP Address
IPv4
111.63.171.44
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 111.63.171.44
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
ASN
AS24547
Hebei Mobile Communication Company Limited
Country
—
GeoIP pending
Reverse DNS
—
PTR
Open Ports
39
Last scan
Autonomous System
ASN
AS Name
Hebei Mobile Communication Company Limited
AS Type
—
RIR
APNIC
Allocated
2006-01-24
Allocation status
Allocated
Geolocation
Country
—
Continent
—
Source
MaxMind GeoLite2
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 20 | tcp | ftp-data | — | 2026-07-23 03:42:15.000 |
| 143 | tcp | imap | — | 2026-07-23 06:41:59.000 |
| 322 | tcp | — | — | 2026-06-19 00:18:13.000 |
| 513 | tcp | — | — | 2026-06-19 07:55:55.000 |
| 514 | tcp | syslog | — | 2026-07-24 17:22:11.000 |
| 524 | tcp | — | — | 2026-07-26 19:57:50.000 |
| 540 | tcp | — | — | 2026-07-25 03:34:45.000 |
| 660 | tcp | — | — | 2026-06-19 18:51:49.000 |
| 712 | tcp | — | — | 2026-06-21 19:04:10.000 |
| 783 | tcp | — | — | 2026-06-18 18:59:42.000 |
| 902 | tcp | — | — | 2026-07-19 21:02:01.000 |
| 981 | tcp | — | — | 2026-07-27 14:58:07.000 |
| 1110 | tcp | — | — | 2026-07-22 06:21:11.000 |
| 1194 | tcp | openvpn | — | 2026-07-25 15:03:35.000 |
| 1494 | tcp | — | — | 2026-06-18 12:49:50.000 |
| 1813 | tcp | — | — | 2026-07-21 04:21:22.000 |
| 1900 | tcp | — | — | 2026-07-22 19:23:33.000 |
| 2083 | tcp | — | — | 2026-07-21 20:52:11.000 |
| 2701 | tcp | — | — | 2026-07-20 01:59:51.000 |
| 3268 | tcp | — | — | 2026-07-25 08:34:02.000 |
| 3269 | tcp | — | — | 2026-07-21 22:15:49.000 |
| 3389 | tcp | rdp | — | 2026-07-22 11:20:28.000 |
| 4444 | tcp | — | — | 2026-06-20 23:34:33.000 |
| 4664 | tcp | — | — | 2026-07-19 21:59:24.000 |
| 5061 | tcp | — | — | 2026-07-24 06:33:44.000 |
| 5901 | tcp | — | — | 2026-06-23 10:06:27.000 |
| 6697 | tcp | — | — | 2026-06-18 13:06:07.000 |
| 8000 | tcp | http-alt | — | 2026-07-22 01:19:36.000 |
| 8118 | tcp | — | — | 2026-07-22 23:36:17.000 |
| 8333 | tcp | — | — | 2026-06-23 01:26:00.000 |
| 8443 | tcp | https-alt | Tengine | 2026-06-23 21:44:05.000 |
| 8531 | tcp | — | — | 2026-07-23 23:02:39.000 |
| 8883 | tcp | — | — | 2026-07-24 20:26:58.000 |
| 14443 | tcp | — | — | 2026-07-22 17:45:39.000 |
| 17000 | tcp | — | — | 2026-07-20 14:18:23.000 |
| 18181 | tcp | — | — | 2026-07-28 00:21:38.000 |
| 23023 | tcp | — | — | 2026-07-24 08:00:51.000 |
| 28017 | tcp | — | — | 2026-06-18 07:38:25.000 |
| 49153 | tcp | — | — | 2026-07-25 12:06:27.000 |
TLS Certificates
Port 8443
078f75332ced…
Subject: *.alibabacorp.com
Issuer: GlobalSign Organization Validation CA - SHA256 - G3
SANs: *.56.cainiao-inc.com, *.56.cainiao.com, *.9game.cn, *.a.alibaba-inc.com, *.abs.alibaba-inc.com, *.acc.alibaba-inc.com, *.acds.taobao.org, *.acp.alibaba-inc.com, *.acs.alibabaplanet.com, *.addr.cainiao-inc.com, *.admin.alibaba-inc.com, *.admin.alitrip.com, *.admin.cainiao-inc.com, *.admin.fliggy.com, *.alibabacorp.com, 090826.aliyun.com, api-xspace.daraz.com, api.aliyun.com, app73960.eapps.dingtalkcloud.com, biaoju.aliyun.com, cbu-xiaoer.aliyun.com, cicef.org.cn, code-ssr.fc.aliyun.com, dlc-gateway.pai-damo.alibaba-inc.com, eai-vga.an-ahengdv.aliyuncs.com, edsoggavstoner-vga.an-ahengdv.aliyuncs.com, fbi.lazada.com, hcwms.aliyun.com, hvoyijiojv.tmall.com, ide-jog-ogent.oone.ojibobo-ina.aon.alibaba-inc.com, insvronae.tmall.com, mse-vpc.ap-southeast-5.aliyuncs.com, oa.dingtalk.com, oggs.1688.com, oogi.o2.ojibobo-ina.aon.alibaba-inc.com, print.gfn.cainiao.com, security-nash-web.zhangjiakou.zone, shog1301373o611i7.1688.com, shog36415005.taobao.com, shog413558627.taobao.com, shop1429527762715.aliyun.com, shop36322980.aliyun.com, shop497241465.taobao.com, sjender.ojibobo-ina.aon.alibaba-inc.com, sjs4serviae.aonsoje.aliyun.com, ticket.aliyun.com, unpm-upaas.quark.cn, web.lazada.com, www22.aliexpress.com, www9.buntleben.xixikf.cn, yiwuzy.aliyun.com, zsdxad.1688.com
Valid 2023-04-12 23:17:04 → 2024-05-13 23:11:02
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
dingtalkcloud.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230
cainiao.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN print.gfn.cainiao.com which currently resolves through Alibaba (AS37963) at 101.91.140.218, 2408:4002:1f20::28a, 2408:4002:1f10::32, 47.100.168.120
org.cn
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN cicef.org.cn which currently resolves through Alibaba (AS37963) at 203.107.45.167
aliexpress.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN www22.aliexpress.com which currently resolves through Alibaba (AS45102) at 47.89.80.219, 47.89.80.78, 47.89.80.209, 47.89.80.131
dingtalk.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN oa.dingtalk.com which currently resolves through Alibaba (AS45102) at 47.246.146.112, 47.246.137.199
taobao.org
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN acds.taobao.org which currently resolves through Alibaba (AS37963) at 59.82.17.163, 59.82.17.162, 59.82.29.3, 59.82.29.0
fliggy.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN admin.fliggy.com which currently resolves through Alibaba (AS37963) at 203.119.175.235, 203.119.169.44, 203.119.145.40, 203.119.175.203
1688.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN oggs.1688.com which currently resolves through Alibaba (AS37963) at 203.119.169.243, 2408:4001:f00::282, 2408:4001:f00::9a, 2408:4001:f00::c7
cainiao-inc.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN addr.cainiao-inc.com which currently resolves through Alibaba (AS37963) at 203.119.252.109, 203.119.252.3, 59.82.132.131, 59.82.133.28
xixikf.cn
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN www9.buntleben.xixikf.cn which currently resolves through Alibaba (AS37963) at 59.82.31.205, 59.82.29.158, 59.82.31.108, 59.82.31.107
alibaba-inc.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN a.alibaba-inc.com which currently resolves through Alibaba (AS37963) at 59.82.121.188, 59.82.120.14
9game.cn
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN 9game.cn which currently resolves through Alibaba (AS37963) at 203.119.175.208
alibaba-inc.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN admin.alibaba-inc.com which currently resolves through Alibaba (AS45102) at 47.89.80.217
alibabacorp.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN alibabacorp.com which currently resolves through Alibaba (AS37963) at 140.205.155.166
lazada.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN fbi.lazada.com which currently resolves through Alibaba (AS45102) at 47.246.165.239, 47.246.167.247, 47.246.165.219, 47.246.167.129
aliyun.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN api.aliyun.com which currently resolves through Alibaba (AS45102) at 47.246.146.190, 47.246.146.52, 47.246.146.55, 47.246.146.192
alitrip.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN admin.alitrip.com which currently resolves through Alibaba (AS37963) at 59.82.9.84, 59.82.9.157, 59.82.9.88, 59.82.9.86
tmall.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN hvoyijiojv.tmall.com which currently resolves through Alibaba (AS45102) at 47.246.177.213, 47.246.177.221, 47.246.177.217, 47.246.177.225
daraz.com
95% confidence
behind AS45102 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN api-xspace.daraz.com which currently resolves through Alibaba (AS45102) at 47.246.167.240, 47.246.167.168, 47.246.167.214, 47.246.167.195
quark.cn
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN unpm-upaas.quark.cn which currently resolves through Alibaba (AS37963) at 59.82.120.39, 59.82.121.52, 2408:4001:f00::109c, 2408:4001:f10::201
taobao.com
95% confidence
behind AS37963 cert 078f75332ced… · cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN shog36415005.taobao.com which currently resolves through Alibaba (AS37963) at 203.119.169.17, 59.82.31.182, 203.119.169.240, 59.82.29.204
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-07-31.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-06-18 07:38
Last observed
2026-07-28 00:21
Scan observations
65
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.