JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.7.4.249

163.7.4.249 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 0%: ?

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.7.4.249

Whois 163.7.4.249

IP Abuse Reports for 163.7.4.249:

This IP address has been reported a total of 103 times from 87 distinct sources. 163.7.4.249 was first reported on February 24th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 MWA SOC	2026-03-04 19:07:39 (3 months ago)		Hacking
🇳🇱 oisecnet	2026-02-27 22:01:31 (3 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-02-27. 5 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-02-27. 5 requests from this IP. show less	Brute-Force Web App Attack SSH
🇩🇪 KI-Netzwerk	2026-02-27 06:04:36 (3 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇨🇿 akac	2026-02-27 06:01:29 (3 months ago)	Web vulnerability scanning: HTTP/1.1 POST /apps	Hacking Brute-Force Bad Web Bot Web App Attack
🇫🇮 sw0ok	2026-02-27 05:46:01 (3 months ago)	time="2026-02-27T05:46:00Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST ... show more time="2026-02-27T05:46:00Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fdash.sw0ok.dev%2Fdashboard%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=163.7.4.249 time="2026-02-27T05:46:00Z" level=info msg="Access to https://dash.sw0ok.dev/dashboard/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fdash.sw0ok.dev%2Fdashboard%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=163.7.4.249 ... show less	Brute-Force
🇺🇸 S.O.B.A. Dev.	2026-02-27 04:47:44 (3 months ago)	Threat Blocked by BeeHive from (ASN:150436) (Network:BYTEPLUS-AS-AP Byteplus Pte. Ltd.) (Host:soba.d ... show more Threat Blocked by BeeHive from (ASN:150436) (Network:BYTEPLUS-AS-AP Byteplus Pte. Ltd.) (Host:soba.dev) (Method:POST) (Protocol:HTTP/1.1) (Timestamp:2026-02-27T04:47:44Z) show less	Brute-Force Web Spam Web App Attack
🇨🇭 dalslab ltd	2026-02-27 04:43:13 (3 months ago)	[27/Feb/2026:05:43:12 +0100] - 404 404 - HEAD https ntfy.dalslab.com "/apps" [Client 163.7.4.249] [L ... show more [27/Feb/2026:05:43:12 +0100] - 404 404 - HEAD https ntfy.dalslab.com "/apps" [Client 163.7.4.249] [Length 0] [Gzip -] [Sent-to 10.1.1.232] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" "-" [27/Feb/2026:05:43:12 +0100] - 404 404 - HEAD https ntfy.dalslab.com "/api/action" [Client 163.7.4.249] [Length 0] [Gzip -] [Sent-to 10.1.1.232] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" "-" [27/Feb/2026:05:43:12 +0100] - 404 404 - HEAD https ntfy.dalslab.com "/api/actions" [Client 163.7.4.249] [Length 0] [Gzip -] [Sent-to 10.1.1.232] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" "-" [27/Feb/2026:05:43:13 +0100] - 404 404 - HEAD https ntfy.dalslab.com "/_next/data" [Client 163.7.4.249] [Length 0] [Gzip -] [Sent-to 10.1.1.232] "Mozilla/5. ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-02-27 04:37:16 (3 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (Windo ... show more Cloudflare WAF: Request Path: / Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Action: block Source: firewallManaged ASN Description: BYTEPLUS-AS-AP Byteplus Pte. Ltd. Country: ID Method: POST Timestamp: 2026-02-27T04:37:16Z ruleId: 3fe69f2a728e40dfabd2cfb602a9ee96. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇬🇧 poundawebsiteltd	2026-02-27 04:18:46 (3 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 163.7.4.249 - - [27/Feb/2026:04: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 163.7.4.249 - - [27/Feb/2026:04:18:44 +0000] POST / HTTP/1.1 403 2828 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-02-27 04:16:25 (3 months ago)	Malware host detected by rbl.malware.expert. RBL lookup of 249.4.7.163.rbl.malware.expert succeeded ... show more Malware host detected by rbl.malware.expert. RBL lookup of 249.4.7.163.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-stl2-14) show less	Hacking
🇳🇱 ConsulHosting	2026-02-27 04:05:36 (3 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇦🇷 RocketEmi	2026-02-27 03:57:45 (3 months ago)	High-volume distributed requests from multiple IPs	Bad Web Bot
🇩🇪 bescared	2026-02-27 03:36:37 (3 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇫🇮 sw0ok	2026-02-27 03:35:37 (3 months ago)	time="2026-02-27T03:35:36Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is n ... show more time="2026-02-27T03:35:36Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=163.7.4.249 time="2026-02-27T03:35:36Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=163.7.4.249 time="2026-02-27T03:35:36Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=163.7.4.249 ... show less	Brute-Force
🇨🇿 ddw	2026-02-27 03:31:42 (3 months ago)	ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 55))	Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c2b::120

🇳🇱 2001:67c:e60:c0c:192:42:116:118

🇨🇳 218.65.4.88

🇸🇪 171.25.158.87

🇮🇳 139.59.36.109

🇮🇳 103.77.43.96

🇳🇱 89.21.67.158

🇬🇧 80.2.25.106

🇩🇪 69.5.169.3

🇩🇪 65.111.26.171

🇮🇳 2405:201:4041:9916:cf6:260:f6c9:852d

🇲🇽 187.216.224.85

🇺🇸 185.180.141.5

🇮🇳 172.253.222.215

🇷🇴 141.98.83.240

🇩🇪 136.243.222.140

🇫🇮 135.181.182.250

🇩🇪 65.111.26.185

🇺🇸 3.232.102.111

🇺🇸 216.239.34.223