JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.47.20.254

101.47.20.254 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 40%: ?

40%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.47.20.254

Whois 101.47.20.254

IP Abuse Reports for 101.47.20.254:

This IP address has been reported a total of 79 times from 20 distinct sources. 101.47.20.254 was first reported on December 25th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 milcraft.nl	2026-06-06 20:00:26 (1 day ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇫🇷 Sklurk	2026-06-04 04:42:09 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-31 10:44:50 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-28 01:03:15 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-22 00:13:48 (2 weeks ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-05-19 06:54:13 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/leke-te-reja-apo-leke-te-vjetra/51401/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-18 05:38:34 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/jeni-troke-ja-si-te-beni-para-shume-shpejt/419757/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-18 01:20:01 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/pse-shoku-i-dhomes-mund-te-quhet-monster-foto-lajm/463768/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nodepile	2026-05-15 13:25:20 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-popup.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-05-13 06:41:48 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-05-09 13:52:43 (4 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇦 1gz	2026-05-09 05:57:08 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/ne-shume-vende-eshte-drejt-fundit-silva-bino-vaksinimi-do-te-zgjase-gjithe-vitit/563775/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-08 02:44:03 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/historia-rreqethesee-14-vjecarit-mami-nuk-dua-me-te-jetoj-foto-lajm/479245/2/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇴 INTEQ	2026-05-08 00:48:26 (1 month ago)	Web attack from 101.47.20.254	Web App Attack
🇩🇪 pltcldvlpr	2026-05-07 12:53:33 (1 month ago)	Unidentified crawler ignoring robots.txt: 101.47.20.254 - - [07/May/2026:14:53:25 +0200] "GET /proto ... show more Unidentified crawler ignoring robots.txt: 101.47.20.254 - - [07/May/2026:14:53:25 +0200] "GET /protocol?id=nw_18_110&paragraph=10816986&seq=2129 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" asn=150436 org="Byteplus Pte. Ltd." 101.47.20.254 - - [07/May/2026:14:53:33 +0200] "GET /protocol?id=nw_18_110&offset=2100&seq=2129 HTTP/1.1" 200 344358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" asn=150436 org="Byteplus Pte. Ltd." ... show less	Bad Web Bot

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 203.124.44.231

🇺🇸 192.3.196.157

🇷🇺 176.109.97.11

🇳🇱 176.65.148.84

🇺🇸 172.236.254.181

🇪🇸 85.61.90.129

🇷🇴 80.94.92.171

🇺🇸 76.132.238.43

🇺🇸 71.6.232.30

🇺🇸 66.132.186.220

🇦🇺 51.161.128.68

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇺🇬 197.239.14.215

🇿🇦 173.194.171.216

🇯🇵 159.26.119.30

🇺🇸 143.198.150.150

🇨🇳 113.140.95.2

🇮🇶 65.20.198.159

🇺🇸 31.57.63.117