JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.147

103.163.220.147 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 65%: ?

65%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.147

Whois 103.163.220.147

IP Abuse Reports for 103.163.220.147:

This IP address has been reported a total of 219 times from 77 distinct sources. 103.163.220.147 was first reported on March 28th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-26 12:45:18 (3 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-25 19:05:32 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (37/60 min)'; Requests=37	Port Scan
🇳🇱 Site.eu	2026-06-24 22:47:27 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-06-23 21:30:18 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-06-17 20:26:50 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-17 19:36:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.147 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 15:36:47.258357 2026] [security2:error] [pid 27488:tid 27488] [client 103.163.220.147:33465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohanbyles.com.au"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "ajL3Txj8rJWMzLCmqmowsAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-17 18:53:34 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 masterguru	2026-06-17 14:52:04 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-06-15 03:17:27 (2 weeks ago)	2026-06-15T03:17:27+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-15T03:17:27+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=42707 PROTO=TCP SPT=57034 DPT=9487 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-15T03:17:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=50604 PROTO=TCP SPT=8245 DPT=6638 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-15T03:17:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=61830 PROTO=TCP SPT=51099 DPT=5570 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Hacking Port Scan Email Spam Brute-Force SSH Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-06-14 08:01:49 (2 weeks ago)	2026-06-14T08:01:49+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-14T08:01:49+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=29637 PROTO=TCP SPT=7931 DPT=15177 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-14T08:01:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=41881 PROTO=TCP SPT=55340 DPT=12402 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-14T08:01:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.163.220.147 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=46895 PROTO=TCP SPT=51256 DPT=13842 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Hacking Port Scan Brute-Force Email Spam SSH Bad Web Bot
🇫🇷 Octopuce	2026-06-11 17:09:01 (2 weeks ago)	Aggressive web search of vulnerable pages: /wp-includes/random_compat/config.php /wp-admin/maint/con ... show more Aggressive web search of vulnerable pages: /wp-includes/random_compat/config.php /wp-admin/maint/config.php /wp-includes/images/wlw/admin.php / ... show less	Web App Attack
🇺🇸 fazar	2026-06-10 17:33:39 (2 weeks ago)	crowdsecurity/http-probing on node: us01	Web App Attack Hacking
🇨🇭 Origon	2026-06-01 20:21:44 (3 weeks ago)	http-wordpress-scan - IP: 103.163.220.147 - time="2026-06-01T22:21:44+02:00" level=info msg="(555f6 ... show more http-wordpress-scan - IP: 103.163.220.147 - time="2026-06-01T22:21:44+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 103.163.220.147 (JP/206092) : 4h ban on Ip 103.163.220.147" module=db show less	Web App Attack
🇿🇦 Tokolosh Hunters	2026-06-01 20:13:46 (3 weeks ago)	AutoBlockWindow-Known bad useragent query-2026-06-01 20:13:45	Bad Web Bot
Anonymous	2026-06-01 19:07:00 (3 weeks ago)	Multiple, malicious web requests detected	Port Scan Hacking

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 49.151.174.190

🇧🇷 2a09:bac1:1120:b0::2d8:cb

🇩🇪 217.253.123.113

🇺🇸 192.155.90.118

🇩🇪 150.241.77.28

🇻🇳 103.20.97.75

🇸🇪 90.230.226.175

🇳🇱 84.105.229.48

🇱🇹 45.227.254.170

🇧🇪 34.79.146.207

🇲🇽 187.230.85.160

🇷🇺 178.155.127.12

🇳🇱 160.119.71.136

🇨🇳 124.236.253.58

🇩🇿 105.96.19.44

🇷🇴 92.118.39.71

🇳🇱 89.21.67.174

🇳🇱 34.178.21.247

🇨🇴 201.46.124.0

🇸🇬 165.154.200.48