JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.47.20.26

101.47.20.26 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 38%: ?

38%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.47.20.26

Whois 101.47.20.26

IP Abuse Reports for 101.47.20.26:

This IP address has been reported a total of 68 times from 18 distinct sources. 101.47.20.26 was first reported on January 11th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-02 05:18:35 (4 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-05-21 05:46:55 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/37-vjeari-shqiptar-terrorizon-pronarin-italian-ta-njoh-fytyrn-di-k/285671/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-05-16 01:10:16 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-05-14 03:25:48 (3 weeks ago)	Attack Signature Blocked: /brands/rcf/shopby/manufacturer-snom-rcf-bxb-lsi-ask_proxima-projectiondes ... show more Attack Signature Blocked: /brands/rcf/shopby/manufacturer-snom-rcf-bxb-lsi-ask_proxima-projectiondesign-xyz.html?dir=asc&order=most_viewed (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack
🇺🇸 nodepile	2026-05-12 01:36:52 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36') show less	Web App Attack Exploited Host
🇨🇦 1gz	2026-05-11 12:34:13 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/kim-ne-mesazhin-e-vitit-te-ri-tregon-se-lufta-eshte-afer-me-shba-te/361302/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-08 12:47:18 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kryetitull/super-modelja-behet-miliarderja-me-e-re-ne-bote-foto-lajm/450405/2/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-05-07 09:58:56 (4 weeks ago)	Unidentified crawler ignoring robots.txt: 101.47.20.26 - - [07/May/2026:11:58:36 +0200] "GET /protoc ... show more Unidentified crawler ignoring robots.txt: 101.47.20.26 - - [07/May/2026:11:58:36 +0200] "GET /protocol?id=hb_20_27&paragraph=4400884&seq=2684 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" asn=150436 org="Byteplus Pte. Ltd." 101.47.20.26 - - [07/May/2026:11:58:50 +0200] "GET /protocol?id=sl_14_33&offset=750&seq=762/ HTTP/1.1" 200 343686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" asn=150436 org="Byteplus Pte. Ltd." 101.47.20.26 - - [07/May/2026:11:58:55 +0200] "GET /protocol?id=sl_14_33&offset=750&seq=762/ HTTP/1.1" 200 343679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" asn=150436 org="Byteplus Pte. Ltd." ... show less	Bad Web Bot
🇺🇸 stechusa	2026-05-06 05:11:00 (1 month ago)	[Askari] \| country=SG \| Behavior: HTTP/1.1 over TLS, URL template abuse, Outdated browser, Concurren ... show more [Askari] \| country=SG \| Behavior: HTTP/1.1 over TLS, URL template abuse, Outdated browser, Concurrent page load during attack, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-05-06 05:11:00 (1 month ago)	ELEVATED_THREAT \| country=SG \| ASN=Byteplus Pte. Ltd. \| AbuseIPDB=48% \| 176 IPs targeting /brand.htm ... show more ELEVATED_THREAT \| country=SG \| ASN=Byteplus Pte. Ltd. \| AbuseIPDB=48% \| 176 IPs targeting /brand.html \| URL template shared by 64 IPs: /brand.html?bulb_shape_type=&bulb_shape=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.90, unique_ips=309) show less	Bad Web Bot DDoS Attack
🇺🇸 nodepile	2026-05-05 20:34:18 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇨🇦 1gz	2026-05-04 13:16:47 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/horoskopi-mos-e-humbni-besimin-ne-dashuri-e-premtja-do-tju-sjelle-fat/535684/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-05-03 04:58:49 (1 month ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-05-02 04:36:17 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/lirohen-serbet-e-arrestuar/332607/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2026-05-01 13:20:33 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 185.228.135.197

🇧🇷 177.76.134.111

🇺🇸 173.239.218.180

🇨🇳 222.222.250.186

🇩🇪 217.154.214.203

🇧🇷 189.50.142.82

🇺🇸 172.234.21.101

🇨🇳 123.13.41.128

🇳🇵 110.34.30.120

🇺🇸 104.164.126.200

🇺🇸 103.153.183.192

🇷🇴 89.47.53.19

🇱🇺 83.142.209.214

🇷🇴 80.94.92.182

🇺🇸 72.10.32.138

🇩🇪 69.5.169.226

🇩🇪 69.5.169.214

🇱🇹 62.60.130.228

🇭🇰 47.86.195.74

🇳🇱 45.198.224.143