城市(city): Singapore
省份(region): unknown
国家(country): Singapore
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '101.47.0.0 - 101.47.63.255'
% Abuse contact for '101.47.0.0 - 101.47.63.255' is 'bd_abuse@bytedance.com'
inetnum: 101.47.0.0 - 101.47.63.255
netname: BYTEPLUS-SG
descr: BYTEPLUS
country: SG
admin-c: BPLA13-AP
tech-c: BPLA13-AP
abuse-c: AB1590-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-BYTEPLUS-SG
mnt-irt: IRT-BYTEPLUS-SG
last-modified: 2024-05-31T02:16:08Z
source: APNIC
irt: IRT-BYTEPLUS-SG
address: 1 Raffles Quay,
e-mail: bd_abuse@bytedance.com
abuse-mailbox: bd_abuse@bytedance.com
admin-c: BPLA13-AP
tech-c: BPLA13-AP
auth: # Filtered
remarks: bd_abuse@bytedance.com was validated on 2026-03-18
mnt-by: MAINT-BYTEPLUS-SG
last-modified: 2026-06-09T07:35:57Z
source: APNIC
role: ABUSE BYTEPLUSSG
country: ZZ
address: 1 Raffles Quay,
phone: +000000000
e-mail: bd_abuse@bytedance.com
admin-c: BPLA13-AP
tech-c: BPLA13-AP
nic-hdl: AB1590-AP
remarks: Generated from irt object IRT-BYTEPLUS-SG
remarks: bd_abuse@bytedance.com was validated on 2026-03-18
abuse-mailbox: bd_abuse@bytedance.com
mnt-by: APNIC-ABUSE
last-modified: 2026-03-18T14:49:12Z
source: APNIC
role: Byteplus Pte Ltd administrator
address: 1 Raffles Quay, #26-10, South Tower, Singapore Singapore 048583
country: SG
phone: +65-6950-4420
e-mail: bd_abuse@bytedance.com
admin-c: BPLA13-AP
tech-c: BPLA13-AP
nic-hdl: BPLA13-AP
mnt-by: MAINT-BYTEPLUS-SG
last-modified: 2022-11-22T00:30:44Z
source: APNIC
% Information related to '101.47.36.0/24AS150436'
route: 101.47.36.0/24
descr: Byteplus
origin: AS150436
mnt-by: MAINT-BYTEPLUS-SG
last-modified: 2023-04-27T14:14:53Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.47.36.227
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;101.47.36.227. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026100500 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 18:30:20 CST 2026
;; MSG SIZE rcvd: 106
Host 227.36.47.101.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 227.36.47.101.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 117.50.34.131 | attackbots | Feb 4 12:57:51 ns382633 sshd\[9619\]: Invalid user sa-milt from 117.50.34.131 port 43392 Feb 4 12:57:51 ns382633 sshd\[9619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 Feb 4 12:57:53 ns382633 sshd\[9619\]: Failed password for invalid user sa-milt from 117.50.34.131 port 43392 ssh2 Feb 4 13:20:27 ns382633 sshd\[15218\]: Invalid user victor from 117.50.34.131 port 51292 Feb 4 13:20:27 ns382633 sshd\[15218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 |
2020-02-04 20:35:27 |
| 185.176.27.26 | attack | scans 4 times in preceeding hours on the ports (in chronological order) 65333 10444 10999 12111 resulting in total of 258 scans from 185.176.27.0/24 block. |
2020-02-04 21:06:09 |
| 219.91.47.165 | attackspambots | Feb 4 05:53:56 163-172-32-151 sshd[21150]: Invalid user user from 219.91.47.165 port 59879 ... |
2020-02-04 20:28:06 |
| 190.161.63.114 | attack | Feb 4 05:53:10 grey postfix/smtpd\[28639\]: NOQUEUE: reject: RCPT from pc-114-63-161-190.cm.vtr.net\[190.161.63.114\]: 554 5.7.1 Service unavailable\; Client host \[190.161.63.114\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?190.161.63.114\; from=\ |
2020-02-04 21:01:06 |
| 59.36.83.249 | attackspam | Unauthorized connection attempt detected from IP address 59.36.83.249 to port 2220 [J] |
2020-02-04 21:07:04 |
| 203.146.116.237 | attack | Feb 4 08:02:24 l02a sshd[28224]: Invalid user kei from 203.146.116.237 Feb 4 08:02:24 l02a sshd[28224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.146.116.237 Feb 4 08:02:24 l02a sshd[28224]: Invalid user kei from 203.146.116.237 Feb 4 08:02:26 l02a sshd[28224]: Failed password for invalid user kei from 203.146.116.237 port 62960 ssh2 |
2020-02-04 20:31:33 |
| 134.175.206.12 | attack | Automatic report - SSH Brute-Force Attack |
2020-02-04 21:09:05 |
| 76.233.226.106 | attackbots | Unauthorized connection attempt detected from IP address 76.233.226.106 to port 2220 [J] |
2020-02-04 20:26:16 |
| 46.38.144.146 | attackbotsspam | Feb 4 14:04:19 v22019058497090703 postfix/smtpd[2394]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 14:05:18 v22019058497090703 postfix/smtpd[2394]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 14:07:29 v22019058497090703 postfix/smtpd[2818]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-04 21:13:17 |
| 222.186.42.155 | attack | Feb 4 13:53:16 dcd-gentoo sshd[19601]: User root from 222.186.42.155 not allowed because none of user's groups are listed in AllowGroups Feb 4 13:53:21 dcd-gentoo sshd[19601]: error: PAM: Authentication failure for illegal user root from 222.186.42.155 Feb 4 13:53:16 dcd-gentoo sshd[19601]: User root from 222.186.42.155 not allowed because none of user's groups are listed in AllowGroups Feb 4 13:53:21 dcd-gentoo sshd[19601]: error: PAM: Authentication failure for illegal user root from 222.186.42.155 Feb 4 13:53:16 dcd-gentoo sshd[19601]: User root from 222.186.42.155 not allowed because none of user's groups are listed in AllowGroups Feb 4 13:53:21 dcd-gentoo sshd[19601]: error: PAM: Authentication failure for illegal user root from 222.186.42.155 Feb 4 13:53:21 dcd-gentoo sshd[19601]: Failed keyboard-interactive/pam for invalid user root from 222.186.42.155 port 58651 ssh2 ... |
2020-02-04 20:53:50 |
| 132.148.129.180 | attack | Feb 4 09:08:41 firewall sshd[14522]: Invalid user ftpuser from 132.148.129.180 Feb 4 09:08:43 firewall sshd[14522]: Failed password for invalid user ftpuser from 132.148.129.180 port 38110 ssh2 Feb 4 09:10:16 firewall sshd[14591]: Invalid user sybase from 132.148.129.180 ... |
2020-02-04 20:47:05 |
| 203.146.170.167 | attackbotsspam | Unauthorized connection attempt detected from IP address 203.146.170.167 to port 2220 [J] |
2020-02-04 20:46:45 |
| 185.112.82.237 | attack | contact form spammer |
2020-02-04 20:37:48 |
| 89.121.245.162 | attackspambots | port scan and connect, tcp 80 (http) |
2020-02-04 20:27:28 |
| 173.252.127.42 | attackbotsspam | [Tue Feb 04 11:53:50.529461 2020] [:error] [pid 9378:tid 139908140226304] [client 173.252.127.42:36518] [client 173.252.127.42] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI outside range: 32-36,38-126. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1304"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data "REQUEST_URI=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2020/01_Januari_2020/Das-III/Analisis_Dinamika_Atmosfer\\xe2\\x80\\x93Laut_Dan_Prediksi_Curah_Hujan_Update_Dasarian_III_Januari_2020.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [tag "paranoia-level/3"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamik ... |
2020-02-04 20:31:09 |