JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.7.182.63

49.7.182.63 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 87%: ?

87%

ISP	ChinaTelecom Group Beijing Ltd,Co
Usage Type	Fixed Line ISP
ASN	AS23724
Domain Name	bjtelecom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.7.182.63

Whois 49.7.182.63

IP Abuse Reports for 49.7.182.63:

This IP address has been reported a total of 70 times from 51 distinct sources. 49.7.182.63 was first reported on March 4th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-08-27 07:02:58 (5 days ago)	Web application attack detected	Hacking Web App Attack
🇵🇾 armandosaucedo.me	2026-08-25 13:59:19 (1 week ago)	Threat Intelligence via ARMTI, Web Attack: GET /dns-query?dns=nboBAAABAAAAAAAAIDI3ZmQ1ZDcwYTA4ZDExZj ... show more Threat Intelligence via ARMTI, Web Attack: GET /dns-query?dns=nboBAAABAAAAAAAAIDI3ZmQ1ZDcwYTA4ZDExZjFiMzkwZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ show less	Web App Attack
🇫🇷 Selckie	2026-08-25 12:11:39 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇫🇮 6kilowatti	2026-08-25 09:55:42 (1 week ago)	49.7.182.63 - - [25/Aug/2026:12:55:42 +0300] "GET /dns-query?dns=Wr8BAAABAAAAAAAAIDIxMzg2ZmNlYTA2YjE ... show more 49.7.182.63 - - [25/Aug/2026:12:55:42 +0300] "GET /dns-query?dns=Wr8BAAABAAAAAAAAIDIxMzg2ZmNlYTA2YjExZjFhYWMwZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ HTTP/1.1" 404 153 "-" "python-httpx/0.27.0" ... show less	Web App Attack
🇳🇱 Eric	2026-08-25 09:36:04 (1 week ago)	[Tue Aug 25 09:36:04.191740 2026] [security2:error] [pid 1264306:tid 1264306] [client 49.7.182.63:41 ... show more [Tue Aug 25 09:36:04.191740 2026] [security2:error] [pid 1264306:tid 1264306] [client 49.7.182.63:41404] [client 49.7.182.63] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/dns-query"] [unique_id "ao1iBLONk4YsRepe92IVdwAAAAU"] [Tue Aug 25 09:36:04.459058 2026] [security2:error] [pid 1264306:tid 1264306] [client 49.7.182.63:41404] [client 49.7.182.63] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350 ... show less	Hacking Web App Attack
🇺🇸 JustMeHere	2026-08-25 09:06:09 (1 week ago)	[Tue Aug 25 05:06:04.705228 2026] [security2:error] [pid 832:tid 979] [client 49.7.182.63:51062] Mod ... show more [Tue Aug 25 05:06:04.705228 2026] [security2:error] [pid 832:tid 979] [client 49.7.182.63:51062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/dns-query"] [unique_id "ao1a_HthDhTQ_GDz-dI-WQAAAIs"] ... show less	Web App Attack
🇩🇪 Erpelstolz	2026-08-25 08:52:21 (1 week ago)	external host: 49.7.182.63 - - [25/Aug/2026:10:52:20 +0200] "GET /dns-query?dns=tiABAAABAAAAAAAAIDQ3 ... show more external host: 49.7.182.63 - - [25/Aug/2026:10:52:20 +0200] "GET /dns-query?dns=tiABAAABAAAAAAAAIDQ3ZDk2YzlhYTA2MjExZjFiMzkwZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ HTTP/1.1" 406 - "-" "python-httpx/0.27.0" CF-Ray:- CF-IP:- show less	Web App Attack
🇺🇸 kosada.com	2026-08-25 08:39:57 (1 week ago)	Web vulnerability probing: /dns-query (bogus vhost/SNI)	Web App Attack
🇩🇪 Céline	2026-08-25 08:10:30 (1 week ago)	Shield Guard: AbuseIPDB: 58% (suspect) \| Scanner: httpx/ (+70) \| Méthode POST sur endpoint lecture s ... show more Shield Guard: AbuseIPDB: 58% (suspect) \| Scanner: httpx/ (+70) \| Méthode POST sur endpoint lecture seule show less	Web App Attack
🇰🇷 eungyeol15	2026-08-25 07:30:12 (1 week ago)	[daon] Web scan/abuse: 1 events (web_probe). paths: GET /dns-query?dns=hVsBAAABAAAAAAAAIGNkZjJkZDIyY ... show more [daon] Web scan/abuse: 1 events (web_probe). paths: GET /dns-query?dns=hVsBAAABAAAAAAAAIGNkZjJkZDIyYTA1NjExZjFhYjY5ZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ -> 404. sample: 49.7.182.63 - - [25/Aug/2026:16:30:12 +0900] "GET /dns-query?dns=hVsBAAABAAAAAAAAIGNkZjJkZDIyYTA1NjExZjFhYjY5ZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ HTTP/2.0" 404 173 "-" "python-httpx/ show less	Web App Attack Hacking
🇧🇪 voormedia	2026-08-25 07:25:51 (1 week ago)	Accessed trap at '/dns-query'	Web App Attack
🇺🇸 jkhorvath.com	2026-08-25 07:12:29 (1 week ago)	Request for URL /dns-query?dns=SyQBAAABAAAAAAAAIDRlNjA2Mjg0YTA1NDExZjFiYzQxZmExNjNlYWM3ZmUwDG9wZW5yZ ... show more Request for URL /dns-query?dns=SyQBAAABAAAAAAAAIDRlNjA2Mjg0YTA1NDExZjFiYzQxZmExNjNlYWM3ZmUwDG9wZW5yZXNvbHZlcgZkbnNsYWICY24AABAAAQ show less	Phishing Brute-Force Web App Attack
🇧🇷 diego	2026-08-25 05:58:05 (1 week ago)	[rede-188] 2026-08-25 05:42:32, Client: 49.7.182.63, Protocol: 6, Unauthorized activity to HTTP: GET ... show more [rede-188] 2026-08-25 05:42:32, Client: 49.7.182.63, Protocol: 6, Unauthorized activity to HTTP: GET /dns-query show less	Web App Attack
🇮🇩 bps-statistics	2026-08-25 05:30:05 (1 week ago)	Web Application Attacks	Web App Attack
🇪🇸 librebit	2026-08-25 04:58:22 (1 week ago)	Brute force	Brute-Force

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 122.225.202.130

🇹🇷 109.236.48.208

🇧🇷 108.179.253.225

🇺🇸 66.74.47.1

🇱🇹 62.60.130.253

🇨🇦 35.203.30.218

🇧🇷 200.232.114.71

🇧🇷 108.179.253.175

🇧🇷 108.179.193.50

🇧🇷 108.179.192.110

🇧🇷 108.179.192.20

🇱🇹 62.60.130.201

🇩🇪 47.65.177.59

🇷🇴 2.57.122.238

🇹🇷 185.233.247.245

🇨🇳 175.43.184.227

🇻🇳 171.244.37.103

🇧🇷 108.167.188.130

🇺🇸 108.167.161.80

🇨🇭 107.189.14.87