JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.47.22.222

101.47.22.222 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 21%: ?

21%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.47.22.222

Whois 101.47.22.222

IP Abuse Reports for 101.47.22.222:

This IP address has been reported a total of 28 times from 15 distinct sources. 101.47.22.222 was first reported on January 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-08 21:02:29 (2 days ago)	NOQUEUE - IP: 101.47.22.222 - Jun 8 23:02:29 plesk postfix/smtpd[2728053]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 101.47.22.222 - Jun 8 23:02:29 plesk postfix/smtpd[2728053]: NOQUEUE: reject: RCPT from unknown[101.47.22.222]: 554 5.7.1 Service unavailable; Client host [101.47.22.222] blocked using dnsbl-2.uceprotect.net; Net 101.47.0.0/18 is UCEPROTECT-Level2 listed because 129 impacts are seen from BYTEPLUS-AS-AP Byteplus Pte. Ltd., SG/AS150436 there. See: http://www.uceprotect.net/rblcheck.php?ipr=101.47.22.222 / Net 101.47.16.0/21 is UCEPROTECT-Level2 listed because 123 impacts are seen from BYTEPLUS-AS-AP Byteplus Pte. Ltd., SG/AS150436 there. See: http://www.uceprotect.net/rblcheck.php?ipr=101.47.22.222; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<nlwenct.cn> show less	Email Spam
🇩🇪 kernel-error.de	2026-06-08 15:52:11 (2 days ago)	2026-06-08 17:52:10 #13240(rspamd_proxy) <b962a2>; proxy; rspamd_task_write_log: id: <20260608235206 ... show more 2026-06-08 17:52:10 #13240(rspamd_proxy) <b962a2>; proxy; rspamd_task_write_log: id: <[email protected]>, qid: <9F29CC6295>, ip: 101.47.22.222, from: <[email protected]>, (default: F (no action): [49.49/12.00] [SPAMTRAP(15.00){[email protected];},URIBL_BLACK(7.50){shbllgs.cn:url;nlwenct.cn:from_smtp;nlwenct.cn:from_mime;nlwenct.cn:helo;nlwenct.cn:dkim;nlwenct.cn:mid;},PHISHED_PHISHTANK(7.00){hpq http://www.phishtank.com/phish_detail.php?phish_id=9382464;},BAYES_SPAM(5.10){100.00%;},ABUSE_SURBL(5.00){nlwenct.cn:from_smtp;nlwenct.cn:from_mime;nlwenct.cn:helo;nlwenct.cn:dkim;nlwenct.cn:mid;rqvzkqb.shbllgs.cn:url;},HFILTER_HOSTNAME_UNKNOWN(2.50){},RBL_MAILSPIKE_WORST(2.00){101.47.22.222:from;},RBL_VIRUSFREE_BOTNET(2.00){101.47.22.222:from;},RDNS_NONE(2.00){},RBL_SEM(1.00){101.47.22.222:from;},RDNS_DNSFAIL(-1.00){},MV_CASE(0.50){},XM_CASE(0.50){},MANY_INVISIBLE_PARTS(0.20){3;},BAD_REP_POLICIES(0.10){},MIME_BASE64_TEXT(0.10){},MIME_GOOD(-0.10){multipart/alternative;te ... show less	Email Spam
🇨🇭 Origon	2026-06-06 19:32:01 (4 days ago)	NOQUEUE - IP: 101.47.22.222 - Jun 6 21:32:01 plesk postfix/smtpd[3693661]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 101.47.22.222 - Jun 6 21:32:01 plesk postfix/smtpd[3693661]: NOQUEUE: reject: RCPT from unknown[101.47.22.222]: 554 5.7.1 Service unavailable; Client host [101.47.22.222] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?101.47.22.222; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<nlwenct.cn> show less	Email Spam
🇺🇸 NXTwoThou	2026-05-26 12:34:37 (2 weeks ago)	Spam	Email Spam
🇨🇭 backslash	2026-03-19 19:03:04 (2 months ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇺🇸 octageeks.com	2026-03-19 04:07:30 (2 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-03-18 12:30:53 (2 months ago)		Web App Attack
🇺🇸 ipblock.com	2026-03-18 09:55:00 (2 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-03-18 05:51:11 (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 S ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/170.1 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-03-18 05:27:40 (2 months ago)	Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers ... show more Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/180.1 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-18 05:19:09 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 101.47.22.222 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 101.47.22.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 01:19:05.629913 2026] [security2:error] [pid 22091:tid 22091] [client 101.47.22.222:40616] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.JustinRudd.com\|F\|2"] [data ".bonpetsupply.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.justinrudd.com"] [uri "/www.bonpetsupply.com"] [unique_id "abo1yXUffHFA8EdFOSBZVgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-03-18 04:41:49 (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 chrisj	2026-03-11 17:37:36 (2 months ago)	2026-03-11T17:37:33.270329+00:00 www.diamondaviators.net throttler[2449908]: Throttle IP 101.47.22.2 ... show more 2026-03-11T17:37:33.270329+00:00 www.diamondaviators.net throttler[2449908]: Throttle IP 101.47.22.222 with 25 denials ... show less	Bad Web Bot
🇺🇸 gui-ying233	2026-03-04 01:46:36 (3 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-03-04 01:01:47 (3 months ago)	Automated report (2026-03-03T20:01:47-05:00). Nesting attack detected.	Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.151.32.230

🇷🇴 151.242.30.224

🇺🇸 147.185.132.82

🇻🇳 103.163.215.131

🇰🇷 59.24.131.89

🇵🇱 54.38.52.18

🇺🇸 208.87.242.107

🇺🇸 199.48.128.86

🇺🇸 192.3.64.210

🇧🇷 177.38.71.226

🇮🇳 103.25.47.94

🇩🇪 94.130.12.45

🇭🇰 47.79.20.59

🇨🇳 1.193.163.2

🇮🇷 217.114.40.16

🇩🇪 165.232.68.155

🇺🇸 142.54.232.1

🇨🇳 111.63.42.76

🇫🇷 109.123.247.52

🇨🇳 101.126.30.240