JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.7.11.71

163.7.11.71 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 100%: ?

100%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.7.11.71

Whois 163.7.11.71

IP Abuse Reports for 163.7.11.71:

This IP address has been reported a total of 100 times from 83 distinct sources. 163.7.11.71 was first reported on July 14th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Klaverstyn	2026-07-14 08:35:44 (3 minutes ago)	Excessive HTTP request rate	Web App Attack
🇪🇸 masterguru	2026-07-14 08:34:16 (5 minutes ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇩🇪 Manuel Braeuer	2026-07-14 08:24:03 (15 minutes ago)	163.7.11.71 - - [14/Jul/2026:10:23:56 +0200] "GET /.htaccess HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (co ... show more 163.7.11.71 - - [14/Jul/2026:10:23:56 +0200] "GET /.htaccess HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (compatible; pathscan/1.0)" 163.7.11.71 - - [14/Jul/2026:10:23:58 +0200] "GET /db.sql HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (compatible; pathscan/1.0)" 163.7.11.71 - - [14/Jul/2026:10:23:58 +0200] "GET /database.sql HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (compatible; pathscan/1.0)" 163.7.11.71 - - [14/Jul/2026:10:23:59 +0200] "GET /dump.sql HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (compatible; pathscan/1.0)" 163.7.11.71 - - [14/Jul/2026:10:24:03 +0200] "GET /readme.md HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (compatible; pathscan/1.0)" ... show less	Web App Attack
🇸🇬 Starburst SysOp Team	2026-07-14 08:14:17 (24 minutes ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-sin2-2)	Hacking Web App Attack
🇺🇸 ersei.net	2026-07-14 08:14:08 (25 minutes ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇨🇭 zynex	2026-07-14 08:14:06 (25 minutes ago)	URL Probing: /1x2kg3q5bnts9wol7zma5ns8a.php	Web App Attack
🇩🇪 patrisei	2026-07-14 08:00:35 (38 minutes ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing show less	Port Scan Web App Attack
🇺🇸 Matthew Ping	2026-07-14 08:00:01 (39 minutes ago)	ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇦🇺 rubixstudios	2026-07-14 07:58:02 (41 minutes ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
Anonymous	2026-07-14 07:52:14 (47 minutes ago)	(caddyscan) Scanner path probe from 163.7.11.71 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 163.7.11.71 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 163.7.11.71 - - [14/Jul/2026:07:52:11 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 163.7.11.71 - - [14/Jul/2026:07:52:11 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 163.7.11.71 - - [14/Jul/2026:07:52:12 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 163.7.11.71 - - [14/Jul/2026:07:52:12 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 163.7.11.71 - - [14/Jul/2026:07:52:12 +0000] "GET /.htaccess HTTP/1.1" show less	Port Scan
Anonymous	2026-07-14 07:34:53 (1 hour ago)	Aggressive web scan	Web App Attack
🇫🇮 as211431.net	2026-07-14 07:31:39 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.ssh/id_rsa UA: Mozilla/5.0 (compatible; pathscan/1.0) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-07-14 07:27:44 (1 hour ago)	. Matched phrase "/.git/" at REQUEST_URI. (210492-srv1)	Web App Attack
🇫🇷 masterguru	2026-07-14 07:24:36 (1 hour ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇳🇱 vaddilyin	2026-07-14 07:21:57 (1 hour ago)	{"ClientAddr":"163.7.11.71:52236","ClientHost":"163.7.11.71","ClientPort":"52236","ClientUsername":" ... show more {"ClientAddr":"163.7.11.71:52236","ClientHost":"163.7.11.71","ClientPort":"52236","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":54560,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":54560,"RequestAddr":"meta.vdkln.com","RequestContentSize":0,"RequestCount":196161,"RequestHost":"meta.vdkln.com","RequestMethod":"GET","RequestPath":"/1jaf76etr7mzq193votpml3lti.php","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-07-14T07:21:55.282545125Z","StartUTC":"2026-07-14T07:21:55.282545125Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-14T07:21:55Z"} {"ClientAddr":"163.7.11.71:52236","ClientHost":"163.7.11.71","ClientPort":"52236","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":52815,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Ov ... show less	Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.19

🇬🇧 193.176.29.14

🇳🇬 165.154.11.149

🇺🇸 162.216.149.7

🇺🇸 144.172.96.144

🇺🇸 143.244.169.204

🇸🇬 143.198.221.127

🇧🇷 143.95.209.223

🇨🇦 138.197.164.175

🇨🇳 122.224.161.204

🇨🇳 117.15.91.73

🇺🇸 65.49.1.173

🇭🇰 45.10.175.193

🇪🇸 213.195.119.102

🇺🇸 147.185.132.203

🇮🇳 143.110.251.21

🇮🇳 143.110.241.64

🇮🇳 143.110.186.36

🇮🇳 143.110.181.226

🇨🇳 120.76.116.45