IP Address
IPv4
218.91.198.134
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 218.91.198.134
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Autonomous System
ASN
AS Name
China Telecom
AS Type
—
RIR
APNIC
Allocated
2002-08-01
Allocation status
Allocated
Geolocation
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 21 | tcp | ftp | — | 2026-07-24 23:28:30.000 |
| 139 | tcp | netbios-ssn | — | 2026-07-24 21:35:38.000 |
| 443 | tcp | https | AliyunOSS | 2026-07-27 04:55:59.000 |
| 520 | tcp | — | — | 2026-06-22 23:12:46.000 |
| 750 | tcp | — | — | 2026-06-19 16:37:28.000 |
| 873 | tcp | rsync | — | 2026-06-21 09:10:34.000 |
| 953 | tcp | — | — | 2026-07-26 02:20:16.000 |
| 993 | tcp | imaps | — | 2026-07-25 23:23:51.000 |
| 995 | tcp | pop3s | — | 2026-07-19 07:46:21.000 |
| 1080 | tcp | socks | — | 2026-07-19 14:46:51.000 |
| 1352 | tcp | — | — | 2026-07-28 19:00:37.000 |
| 1433 | tcp | mssql | — | 2026-07-19 19:43:22.000 |
| 1723 | tcp | pptp | — | 2026-07-19 03:11:39.000 |
| 1863 | tcp | — | — | 2026-06-18 09:14:16.000 |
| 2095 | tcp | — | — | 2026-07-26 23:20:52.000 |
| 2222 | tcp | ssh-alt | — | 2026-06-18 17:35:12.000 |
| 5101 | tcp | — | — | 2026-07-21 16:15:55.000 |
| 5222 | tcp | — | — | 2026-06-18 16:32:41.000 |
| 5269 | tcp | — | — | 2026-07-25 10:51:04.000 |
| 5357 | tcp | — | — | 2026-06-21 00:18:37.000 |
| 5555 | tcp | — | — | 2026-07-21 14:28:53.000 |
| 5803 | tcp | — | — | 2026-07-20 00:30:46.000 |
| 5984 | tcp | couchdb | — | 2026-06-17 17:02:00.000 |
| 6000 | tcp | — | — | 2026-06-19 18:08:33.000 |
| 6661 | tcp | — | — | 2026-07-23 02:11:04.000 |
| 7000 | tcp | — | — | 2026-06-20 09:11:25.000 |
| 7547 | tcp | — | — | 2026-07-28 20:37:22.000 |
| 8087 | tcp | — | — | 2026-07-22 10:10:49.000 |
| 9001 | tcp | — | — | 2026-06-19 16:21:27.000 |
| 9443 | tcp | — | Tengine | 2026-06-22 23:07:16.000 |
| 17500 | tcp | — | — | 2026-07-21 00:32:02.000 |
| 20000 | tcp | — | — | 2026-06-17 20:02:29.000 |
| 20547 | tcp | — | — | 2026-07-23 17:13:49.000 |
| 23023 | tcp | — | — | 2026-06-19 15:21:25.000 |
| 32764 | tcp | — | — | 2026-06-19 10:44:57.000 |
| 47808 | tcp | — | — | 2026-06-21 12:14:27.000 |
| 50100 | tcp | — | — | 2026-06-21 14:46:28.000 |
| 54321 | tcp | — | — | 2026-06-23 01:05:42.000 |
TLS Certificates
Port 443
e95cd0eb3601…
Subject: cn-shanghai.oss.aliyuncs.com
Issuer: GlobalSign GCC R3 OV TLS CA 2024
SANs: *.aliyuncs.com, *.cn-shanghai-cross.mgw.aliyuncs.com, *.cn-shanghai-dualstack.oss.aliyuncs.com, *.cn-shanghai-finance.oss.aliyuncs.com, *.cn-shanghai-internal.oss-vectors.aliyuncs.com, *.cn-shanghai-vpc.oss.aliyuncs.com, *.cn-shanghai.mgw.aliyuncs.com, *.cn-shanghai.oss-console.aliyuncs.com, *.cn-shanghai.oss-vectors.aliyuncs.com, *.cn-shanghai.oss-vpc.aliyuncs.com, *.cn-shanghai.oss.aliyuncs.com, *.cn-shanghai.osscloud.cn, *.enet.oss-svc-cn.cn, *.enet.osscloud.cn, *.img-cn-shanghai-cross.aliyuncs.com, *.img-cn-shanghai-internal.aliyuncs.com, *.img-cn-shanghai.aliyuncs.com, *.oss-accelerate-overseas.aliyuncs.com, *.oss-accelerate.aliyuncs.com, *.oss-accesspoint.aliyuncs.com, *.oss-cache-cn-shanghai-g-cross.aliyuncs.com, *.oss-cache-cn-shanghai-g.aliyuncs.com, *.oss-cn-shanghai-cross.aliyuncs.com, *.oss-cn-shanghai-finance-1-internal.aliyuncs.com, *.oss-cn-shanghai-finance-1-pub-internal.aliyuncs.com, *.oss-cn-shanghai-finance-1-pub.aliyuncs.com, *.oss-cn-shanghai-finance-1.aliyuncs.com, *.oss-cn-shanghai-internal.aliyuncs.com, *.oss-cn-shanghai-internal.oss-accesspoint.aliyuncs.com, *.oss-cn-shanghai-internal.oss-object-process.aliyuncs.com, *.oss-cn-shanghai.aliyuncs.com, *.oss-cn-shanghai.oss-accesspoint.aliyuncs.com, *.oss-cn-shanghai.oss-object-process.aliyuncs.com, *.oss-enet-cm.aliyuncs.com, *.oss-enet-cn-east.aliyuncs.com, *.oss-enet-ct.aliyuncs.com, *.oss-enet-cu.aliyuncs.com, *.oss-enet.aliyuncs.com, *.oss-internal.aliyuncs.com, *.oss-vectors.aliyuncs.com, *.oss.aliyuncs.com, *.oss.cn-shanghai-finance-1-pub.privatelink.aliyuncs.com, *.oss.cn-shanghai-finance-1.privatelink.aliyuncs.com, *.oss.cn-shanghai.privatelink.aliyuncs.com, *.osscloud.cn, *.s3.oss-accelerate-overseas.aliyuncs.com, *.s3.oss-accelerate.aliyuncs.com, *.s3.oss-cn-shanghai-internal.aliyuncs.com, *.s3.oss-cn-shanghai.aliyuncs.com, *.vpc100-oss-cn-shanghai.aliyuncs.com, cn-shanghai.oss-vpc.aliyuncs.com, cn-shanghai.oss.aliyuncs.com
Valid 2026-01-06 03:12:51 → 2027-02-07 03:12:50
Port 9443
a2aeaaccd1ed…
Subject: *.aliyun.com
Issuer: GlobalSign Organization Validation CA - SHA256 - G3
SANs: *.aliyun.com, 08dong.bjog.ahino.alibaba.com, 10101979.fm.aliyun.com, 107.aliyun.com, 18026237757.1688.com, 27home.aliyun.com, acs-m.confong.cn, adcluster.aliyun.com, ae-wms.sg.cainiao.com, afc.alibaba-inc.com, ahonnej.oxs.tesjo.ojibobo-ina.aon.alibaba-inc.com, aliyun.com, anns-serviae.ojibobo-ina.aon.alibaba-inc.com, app118505.eapps.dingtalkcloud.com, app16962.eapps.dingtalkcloud.com, app4860.eapps.dingtalkcloud.com, app58920.eapps.dingtalkcloud.com, apros.yunos.com, bata.carie.saee.org.cn, bata.pop.saee.org.cn, batit.aliyun.com, bidding.devoto.ojiyvn-ina.aon.aliyun-inc.com, bjcyhy.aliyun.com, btaorogjost.en.alibaba.com, c.lazada.com.ph, cicmav.aliwork.com, ckmonitor.alimama.com, cloud.video.aliyun.com, dionond-inner.aliyuncs.com, doshion.taobao.com, ecm.cn-shanghai.aliyuncs.com, eco-acc.lazada.com.my, edas-internal-ap-southeast-1.aliyun.com, edith.wapa.taobao.com, errlogos.umeng.com, fds.taobao.com, filebroker-lzd-id.alibaba.com, fito.alibaba.com, fpfx3f.aliyun.com, fui.amap.com, g-acs.m.goofish.com, genoisi.tmall.com, goocan.aliwork.com, grsr.tmall.com, hanhenthh.aliexpress.com, iflow-tb.uc.cn, jdsdts.world.aliyun.com, jhdz18664135873.1688.com, jingyonnjnj.1688.com, jobs.rmap.alibaba.net, jvtenghvi.1688.com, knsbvijd.fn.alibaba.com, lpdv5.ele.me, mail.porsche-wenzhou-binhai.com, mail.zjxgchem.com, member-p.lazada.co.id, mxjinpu.aliyun.com, netriahvb-an-shenzhen.aliyun.com, nojj.1688.com, oa.capinfo.com.cn, ogisgea-shore.aliyuncs.com, oji-ndn.ojibobo-ina.aon.alibaba-inc.com, orns-gortioj-an-hongzhov.as.ojiyvn-ina.aon.aliyun-inc.com, os.aliyun.com, partners-api.redmart.com, passport.aliyun.com, passport.hemarket.cn, pre-sp-doorkeeper.aliyun.com, purchase.cbbs.tmall.com, qihong.taobao.com, repo.aliyun.com, s360.lazada.com, san-ogi.ojibobo-ina.aon.alibaba-inc.com, scp-xunxi.taobao.net, sellercenter-sg.lazada-seller.cn, shjonso.1688.com, shod.re.taobao.com, shog36299507.taobao.com, shog36502625.taobao.com, shog36910373.taobao.com, shog393605640.taobao.com, shog637356dv869h0.1688.com, shop1468860913243.aliyun.com, shop36481895.taobao.com, shop36904827.aliyun.com, shop428746655.aliyun.com, shop84659y5567125.1688.com, stars.shuqireader.com, stotvs.taobao.com, svdor.1688.com, toojs.abbs.tmall.com, troae2.sn.ojibobo-ina.aon.alibaba-inc.com, vga-shore.an-qingdoo.aliyuncs.com, viger.ojiyvn-ina.aon.aliyun-inc.com, whitewalkers.alibaba-inc.com, www.cfradio.cn, wwwsigned.faas.ele.me, xnet2-terminator.aliyun.com
Valid 2023-05-05 06:21:16 → 2024-06-05 06:21:15
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
ele.me
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN lpdv5.ele.me which currently resolves through Alibaba (AS37963) at 203.119.174.148, 2408:4001:f00::32d, 203.119.174.146, 203.119.174.149
aliyuncs.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN ecm.cn-shanghai.aliyuncs.com which currently resolves through Alibaba (AS37963) at 106.15.83.32, 8.132.220.1, 8.132.215.194
alibaba-inc.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN afc.alibaba-inc.com which currently resolves through Alibaba (AS37963) at 203.119.213.68, 203.119.212.10, 203.119.213.44, 203.119.213.100
alibaba.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN filebroker-lzd-id.alibaba.com which currently resolves through Alibaba (AS45102) at 47.246.165.74, 47.246.165.188, 47.246.167.137, 47.246.167.161
co.id
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN member-p.lazada.co.id which currently resolves through Alibaba (AS45102) at 47.246.159.224, 47.89.93.216
yunos.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN apros.yunos.com which currently resolves through Alibaba (AS37963) at 59.82.9.84, 59.82.9.86, 59.82.9.90, 59.82.9.88
lazada-seller.cn
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN sellercenter-sg.lazada-seller.cn which currently resolves through Alibaba (AS37963) at 106.11.248.166, 106.11.248.164, 106.11.248.163, 106.11.248.165
dingtalkcloud.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN app118505.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.59.75
alimama.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN ckmonitor.alimama.com which currently resolves through Alibaba (AS45102) at 47.246.146.163, 47.246.146.164, 47.246.146.162, 0.0.0.0
cainiao.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN ae-wms.sg.cainiao.com which currently resolves through Alibaba (AS37963) at 203.119.169.246, 203.119.175.203, 203.119.175.235, 203.119.169.44
aliwork.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN cicmav.aliwork.com which currently resolves through Alibaba (AS45102) at 47.246.146.112, 47.246.137.199
uc.cn
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN iflow-tb.uc.cn which currently resolves through Alibaba (AS37963) at 59.82.31.201, 59.82.31.175, 59.82.23.172, 59.82.31.141
aliexpress.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN hanhenthh.aliexpress.com which currently resolves through Alibaba (AS45102) at 47.89.80.142, 47.89.80.209, 47.89.80.78, 47.89.80.37
hemarket.cn
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN passport.hemarket.cn which currently resolves through Alibaba (AS37963) at 59.82.58.127, 203.119.169.27, 203.119.146.34, 203.119.175.93
lazada.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN s360.lazada.com which currently resolves through Alibaba (AS45102) at 47.246.167.44, 47.246.165.112, 47.246.165.191, 47.246.167.9
com.my
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN eco-acc.lazada.com.my which currently resolves through Alibaba (AS45102) at 47.246.167.44, 47.246.167.47, 47.246.165.114, 47.246.167.9
aliyun.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN passport.aliyun.com which currently resolves through Alibaba (AS45102) at 47.246.103.2, 2401:b180:1:60::6, 2401:b180:1:60::5, 120.27.176.228
tmall.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN genoisi.tmall.com which currently resolves through Alibaba (AS45102) at 47.246.177.213, 47.246.177.221, 47.246.177.225, 47.246.177.217
confong.cn
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN acs-m.confong.cn which currently resolves through Alibaba (AS37963) at 203.119.238.232, 2408:4001:f00::10ea, 203.119.238.165, 2408:4001:f10::10a
goofish.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN g-acs.m.goofish.com which currently resolves through Alibaba (AS37963) at 59.82.113.36, 2408:4001:f00::103f, 59.82.121.221, 2408:4001:f00::1161
tmall.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN purchase.cbbs.tmall.com which currently resolves through Alibaba (AS37963) at 59.82.133.139, 59.82.133.245, 59.82.133.177, 59.82.133.104
umeng.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN errlogos.umeng.com which currently resolves through Alibaba (AS45102) at ::, 47.246.110.96, 47.246.110.18, 0.0.0.0
amap.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN fui.amap.com which currently resolves through Alibaba (AS37963) at 59.82.29.4, 59.82.17.164, 59.82.17.163, 59.82.29.6
aliyun.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN aliyun.com which currently resolves through Alibaba (AS37963) at 140.205.135.3, 106.11.172.9, 106.11.248.146, 106.11.249.99
taobao.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN doshion.taobao.com which currently resolves through Alibaba (AS37963) at 203.119.144.58, 59.82.29.142, 203.119.169.80, 203.119.144.26
alibaba.com
95% confidence
behind AS20940 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN btaorogjost.en.alibaba.com which currently resolves through Akamai (AS20940) at 2.19.96.193, 2.19.96.201, 104.110.240.75, 104.110.240.59
zjxgchem.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN mail.zjxgchem.com which currently resolves through Alibaba (AS45102) at 47.246.146.253, 47.246.136.233, 47.246.137.46
com.ph
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN c.lazada.com.ph which currently resolves through Alibaba (AS45102) at 47.246.167.44, 47.246.167.229, 47.246.167.182, 47.246.167.9
porsche-wenzhou-binhai.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN mail.porsche-wenzhou-binhai.com which currently resolves through Alibaba (AS45102) at 47.246.146.253
redmart.com
95% confidence
behind AS45102 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN partners-api.redmart.com which currently resolves through Alibaba (AS45102) at 47.236.87.217, 8.222.216.98
1688.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN 18026237757.1688.com which currently resolves through Alibaba (AS37963) at 203.119.169.166, 2408:4001:f00::282, 2408:4001:f00::9a, 2408:4001:f00::c7
shuqireader.com
95% confidence
behind AS37963 cert a2aeaaccd1ed… · cert a2aeaacc… served by 218.91.198.134 (AS4134) carries SAN stars.shuqireader.com which currently resolves through Alibaba (AS37963) at 203.119.214.1, 203.119.214.2, 2408:4000:200::44c, 2408:4000:200::261
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-07-31.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-06-17 17:01
Last observed
2026-07-28 20:37
Scan observations
65
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.