IP Address
IPv4
223.109.149.20
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 223.109.149.20
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Autonomous System
Geolocation
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 13 | tcp | — | — | 2026-07-20 18:34:02.000 |
| 17 | tcp | — | — | 2026-07-22 16:20:38.000 |
| 43 | tcp | — | — | 2026-06-20 17:06:33.000 |
| 199 | tcp | — | — | 2026-07-22 15:21:30.000 |
| 264 | tcp | — | — | 2026-07-26 16:08:38.000 |
| 502 | tcp | — | — | 2026-07-22 00:06:31.000 |
| 700 | tcp | — | — | 2026-07-28 19:49:55.000 |
| 705 | tcp | — | — | 2026-07-27 21:20:29.000 |
| 888 | tcp | — | — | 2026-07-21 22:46:40.000 |
| 1100 | tcp | — | — | 2026-07-25 03:10:25.000 |
| 1433 | tcp | mssql | — | 2026-07-19 04:10:30.000 |
| 2095 | tcp | — | — | 2026-07-20 00:34:36.000 |
| 2376 | tcp | docker-tls | — | 2026-06-18 08:46:25.000 |
| 3690 | tcp | — | — | 2026-07-23 03:16:11.000 |
| 3702 | tcp | — | — | 2026-07-28 04:18:49.000 |
| 4040 | tcp | — | — | 2026-07-27 05:01:42.000 |
| 4045 | tcp | — | — | 2026-06-20 12:09:55.000 |
| 5001 | tcp | — | — | 2026-07-27 10:43:18.000 |
| 5101 | tcp | — | — | 2026-07-21 02:49:12.000 |
| 5555 | tcp | — | — | 2026-07-25 17:35:19.000 |
| 5986 | tcp | winrm-https | — | 2026-07-25 18:48:57.000 |
| 6379 | tcp | redis | — | 2026-06-23 14:49:20.000 |
| 6667 | tcp | — | — | 2026-06-18 02:43:53.000 |
| 7001 | tcp | — | — | 2026-06-22 03:50:14.000 |
| 8002 | tcp | — | — | 2026-07-21 15:36:48.000 |
| 8008 | tcp | — | — | 2026-07-22 08:35:36.000 |
| 8080 | tcp | http-proxy | — | 2026-07-24 01:14:41.000 |
| 8088 | tcp | — | — | 2026-06-17 23:10:47.000 |
| 8089 | tcp | — | — | 2026-07-24 19:58:33.000 |
| 8222 | tcp | — | — | 2026-07-19 11:03:08.000 |
| 8443 | tcp | https-alt | Tengine | 2026-06-23 11:31:42.000 |
| 8880 | tcp | — | — | 2026-06-18 06:55:56.000 |
| 9090 | tcp | — | — | 2026-06-20 03:51:27.000 |
| 9100 | tcp | — | — | 2026-07-19 02:46:31.000 |
| 18092 | tcp | — | — | 2026-06-17 20:28:47.000 |
| 18181 | tcp | — | — | 2026-06-19 03:42:29.000 |
| 21025 | tcp | — | — | 2026-06-21 16:26:52.000 |
| 27017 | tcp | mongodb | — | 2026-07-26 03:47:47.000 |
| 27019 | tcp | — | — | 2026-07-18 21:04:52.000 |
| 35357 | tcp | — | — | 2026-07-21 08:06:35.000 |
| 57772 | tcp | — | — | 2026-07-19 21:02:06.000 |
| 64738 | tcp | — | — | 2026-07-22 15:30:29.000 |
TLS Certificates
Port 8443
ad96d518dbc4…
Subject: *.alibabacorp.com
Issuer: GlobalSign Organization Validation CA - SHA256 - G3
SANs: *.56.cainiao-inc.com, *.56.cainiao.com, *.9game.cn, *.a.alibaba-inc.com, *.abs.alibaba-inc.com, *.acc.alibaba-inc.com, *.acds.taobao.org, *.acp.alibaba-inc.com, *.acs.alibabaplanet.com, *.addr.cainiao-inc.com, *.admin.alibaba-inc.com, *.admin.alitrip.com, *.admin.cainiao-inc.com, *.admin.fliggy.com, *.alibabacorp.com, 100fa.tmall.com, 100xb.tmall.com, 1356buy.cn.alibaba.com, aloc-control-plus.amap.com, alogus.aliyun.com, ambari-server.vpc.rds.aliyuncs.com, an.alibaba.com, aoesor-va.ojibobo-ina.aon.alibaba-inc.com, app4860.eapps.dingtalkcloud.com, arms-partial-cn-hangzhou.cs.aliyun-inc.com, beikangbao.tmall.com, business.sqreader.com, caijing.aliyun.com, cnwcs-gateway.cainiao.com, ddd1.dore.ojibobo-ina.aon.alibaba-inc.com, ducky.code.aliyun.com, dvgvong.aonnerae.serviae.ojibobo-ina.aon.alibaba-inc.com, eco-device.lazada.co.id, eej.ojibobo-ina.aon.alibaba-inc.com, epaas.aliyun.com, faw-vw.aliwork.com, filebroker.lazada.co.th, fvyoo.ojibobo-ina.aon.alibaba-inc.com, gm.mmstat.com, gojdnoo.taobao.com, gre-vojid-aonnon-bvy.aliyun.com, he.aliexpress.com, im-developers.dingtalk.com, jognv1.shuqireader.com, kpiqsapi.keruyun.com, login-test.alibaba.net, m-callback2.yun.cn, m-ph.lazada-seller.cn, m.atm.youku.com, mail.mankebao.cn, mei.aliyun.com, member-m.lazada.vn, mmc-local-agent.hemayx.cn, msgacs-m.lazada.com.ph, net.ojibobo-ina.aon.alibaba-inc.com, newretail.marketingbox.aliyun.com, noven.aliyun.com, odg.fa.ojibobo-ina.aon.alibaba-inc.com, ojiding-gre.ojibobo-ina.aon.alibaba-inc.com, olap.devata.aliyun.com, onjine-igrogh-ogi-resovrae-noss.ojibobo-ina.aon.alibaba-inc.com, onniahonnej.taobao.com, pc47.lex.in.th, pre.lazada.vn, qihong.taobao.com, qvojityaheak.an-hongzhov.aliyuncs.com, repo.alibaba-inc.com, retoijajovd.aliyuncs.com, ron-ovth.og-sovtheost-2.ojiyvn-ina.aon.aliyun-inc.com, serviae-aorg.de-internoj.odgs.ojiyvn-ina.aon.aliyun-inc.com, service.ap-southeast-1.maxcompute.aliyun.com, session.scm.lazada.com, shog06t794oq86223.1688.com, shog141778j891985.1688.com, shog1457370005208.1688.com, shog36403617.taobao.com, shog36428432.taobao.com, shog36928233.taobao.com, shog3vtt9525.norket.aliyun.com, shop2401u50313401.1688.com, shop36269239.taobao.com, shop36534461.taobao.com, shop36917581.taobao.com, sojvtion.ojiyvn-ina.aon.aliyun-inc.com, sts-vpc.cn-shanghai.aliyun.com, tmall-mui.aliyun.com, toihoo-shore.ev-aentroj-1.aliyuncs.com, tzyooting.1688.com, venus.lazada.com.ph, www.yixueyiyu.wsq.umeng.com, www.zqlgzly-9.fliggy.com, wwwconfluence.2012.fliggy.com, wwwproduction.faas.ele.me
Valid 2023-04-12 23:17:04 → 2024-05-13 23:11:02
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
fliggy.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN admin.fliggy.com which currently resolves through Alibaba (AS37963) at 203.119.169.44, 203.119.175.235, 203.119.169.158, 203.119.169.246
lazada.vn
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN member-m.lazada.vn which currently resolves through Alibaba (AS45102) at 47.246.167.99, 47.246.165.60, 47.246.167.62, 47.246.167.151
alitrip.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN admin.alitrip.com which currently resolves through Alibaba (AS37963) at 59.82.9.86, 59.82.9.157, 59.82.9.84, 59.82.9.161
lazada-seller.cn
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN m-ph.lazada-seller.cn which currently resolves through Alibaba (AS45102) at 47.246.72.158, 240b:4000:f20::1e2, 240b:4000:f20::19f, 47.246.174.145
aliexpress.com
95% confidence
behind AS16625 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN he.aliexpress.com which currently resolves through Akamai (AS16625) at 95.100.102.159, 2.19.86.131, 88.221.170.127, 104.85.2.149
dingtalkcloud.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN app4860.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::1174, 2400:3200:1300::17ba, 112.124.55.42
ele.me
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN wwwproduction.faas.ele.me which currently resolves through Alibaba (AS37963) at 203.119.174.146, 2408:4001:f00::32d, 203.119.174.149, 203.119.174.148
mankebao.cn
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN mail.mankebao.cn which currently resolves through Alibaba (AS45102) at 47.246.146.253
shuqireader.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN jognv1.shuqireader.com which currently resolves through Alibaba (AS37963) at 203.119.175.235, 203.119.169.246, 203.119.169.44, 203.119.175.203
amap.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN aloc-control-plus.amap.com which currently resolves through Alibaba (AS37963) at 106.11.15.84, 106.11.15.79, 106.11.15.81, 106.11.15.82
mmstat.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN gm.mmstat.com which currently resolves through Alibaba (AS37963) at 140.205.151.5, 2401:b180:7003::2e, 59.82.33.227, 140.205.151.6
cainiao-inc.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN addr.cainiao-inc.com which currently resolves through Alibaba (AS37963) at 203.119.252.109, 203.119.252.3, 59.82.132.131, 59.82.133.28
co.id
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN eco-device.lazada.co.id which currently resolves through Alibaba (AS45102) at 47.246.167.47, 47.246.167.35, 47.246.167.10, 47.246.167.87
sqreader.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN business.sqreader.com which currently resolves through Alibaba (AS37963) at 203.119.144.5, 2408:4001:f00::1b0, 2408:4001:f00::6a, 203.119.175.240
taobao.org
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN acds.taobao.org which currently resolves through Alibaba (AS37963) at 59.82.29.3, 59.82.17.162, 59.82.17.165, 59.82.29.4
yun.cn
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN m-callback2.yun.cn which currently resolves through Alibaba (AS37963) at 2408:4001:f00::1023, 203.119.204.4, 203.119.204.219, 2408:4001:f00::10ac
dingtalk.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN im-developers.dingtalk.com which currently resolves through Alibaba (AS45102) at 47.246.146.112, 47.246.137.199
co.th
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN filebroker.lazada.co.th which currently resolves through Alibaba (AS45102) at 47.246.167.207, 47.246.165.191, 47.246.167.247, 47.246.167.130
alibaba-inc.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN admin.alibaba-inc.com which currently resolves through Alibaba (AS45102) at 47.89.80.217
taobao.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN gojdnoo.taobao.com which currently resolves through Alibaba (AS37963) at 203.119.169.6, 59.82.29.204, 59.82.31.244, 203.119.144.26
alibabacorp.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN alibabacorp.com which currently resolves through Alibaba (AS37963) at 140.205.155.166
umeng.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN www.yixueyiyu.wsq.umeng.com which currently resolves through Alibaba (AS37963) at 59.82.14.198, 59.82.14.193, 0.0.0.0
youku.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN m.atm.youku.com which currently resolves through Alibaba (AS37963) at 2408:4001:f10::8, 47.246.99.161, 47.246.99.254, 0.0.0.0
tmall.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN 100fa.tmall.com which currently resolves through Alibaba (AS45102) at 47.246.177.217, 47.246.177.221, 47.246.177.213, 47.246.177.225
com.ph
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN msgacs-m.lazada.com.ph which currently resolves through Alibaba (AS45102) at 47.246.167.132, 47.246.167.66, 47.246.167.57, 47.246.173.24
cainiao.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN cnwcs-gateway.cainiao.com which currently resolves through Alibaba (AS37963) at 203.119.252.113, 203.119.204.170, 203.119.238.19, 203.119.252.75
9game.cn
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN 9game.cn which currently resolves through Alibaba (AS37963) at 203.119.175.208
alibaba-inc.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN a.alibaba-inc.com which currently resolves through Alibaba (AS37963) at 59.82.121.188, 59.82.120.14
lazada.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN session.scm.lazada.com which currently resolves through Alibaba (AS45102) at 47.246.165.39, 47.246.167.62, 47.246.167.221, 47.246.165.239
aliwork.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN faw-vw.aliwork.com which currently resolves through Alibaba (AS45102) at 47.246.146.112, 47.246.137.199
1688.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN shog06t794oq86223.1688.com which currently resolves through Alibaba (AS37963) at 203.119.169.77, 2408:4001:f00::282, 2408:4001:f00::9a, 2408:4001:f00::c7
alibaba.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN 1356buy.cn.alibaba.com which currently resolves through Alibaba (AS37963) at 203.119.144.20, 203.119.169.168, 203.119.169.227, 203.119.169.76
hemayx.cn
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN mmc-local-agent.hemayx.cn which currently resolves through Alibaba (AS37963) at 106.11.223.120, 106.11.186.8, 106.11.186.22, 106.11.209.13
aliyun.com
95% confidence
behind AS45102 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN service.ap-southeast-1.maxcompute.aliyun.com which currently resolves through Alibaba (AS45102) at 47.88.251.158
keruyun.com
95% confidence
behind AS37963 cert ad96d518dbc4… · cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN kpiqsapi.keruyun.com which currently resolves through Alibaba (AS37963) at 115.227.40.121, 112.124.55.42, 112.124.59.75
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
No external references found yet
As HTML bodies get banner-grabbed, references to external domains land here.
History
First observed
2026-06-17 20:28
Last observed
2026-07-28 19:49
Scan observations
71
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.