JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.158

103.163.220.158 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 71%: ?

71%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.158

Whois 103.163.220.158

IP Abuse Reports for 103.163.220.158:

This IP address has been reported a total of 204 times from 69 distinct sources. 103.163.220.158 was first reported on April 5th 2023, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 11:36:14 (53 minutes ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 07:36:10.951611 2026] [security2:error] [pid 30361:tid 30361] [client 103.163.220.158:60591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikinigirls.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ak42KpuQGsXcBYE80GN35AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-08 01:07:59 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇫🇷 LRob	2026-07-07 05:35:09 (1 day ago)	CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/js/dist/config.php","/wp-content/s ... show more CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-includes/js/dist/config.php","/wp-content/settings.php","/wp-includes/SimplePie/Cache/Cache/config.php","/wp-includes/bootstrap.php"] \| UA: ["Go-http-client/2.0"] show less	Web App Attack
🇧🇪 cmbplf	2026-07-07 01:32:55 (1 day ago)	144 requests with url.path *config.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-05 23:01:58 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:01:51.357282 2026] [security2:error] [pid 7709:tid 7709] [client 103.163.220.158:22793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serranoscoffee.com"] [uri "/wp-content/wp-config.php"] [unique_id "akriXyouYpCRP32rFwSnnAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-05 09:59:46 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 Lino Project	2026-07-03 12:56:05 (4 days ago)	103.163.220.158 - - [03/Jul/2026:14:56:02 +0200] "GET /adminfuns.php HTTP/1.1" 302 431 "-" "Go-http- ... show more 103.163.220.158 - - [03/Jul/2026:14:56:02 +0200] "GET /adminfuns.php HTTP/1.1" 302 431 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-01 19:53:13 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇦🇺 2000cn.com.au	2026-07-01 18:50:43 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇫🇷 masterguru	2026-06-30 06:55:35 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇧🇪 cmbplf	2026-06-27 05:31:00 (1 week ago)	118 requests with url.path *config.php	Brute-Force Bad Web Bot
Anonymous	2026-06-25 19:05:52 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (23/60 min)'; Requests=23	Port Scan
🇫🇷 Octopuce	2026-06-24 21:09:37 (1 week ago)	Aggressive web search of vulnerable pages: /user.php /wp-includes/css/dist/ /wp-content/themes/twent ... show more Aggressive web search of vulnerable pages: /user.php /wp-includes/css/dist/ /wp-content/themes/twentynineteen/sass/site/ /wp-includes/blocks/po ... show less	Web App Attack
🇬🇧 consul.to	2026-06-23 21:30:08 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-06-17 18:52:51 (2 weeks ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.217.25

🇫🇷 91.231.89.199

🇬🇧 34.105.226.221

🇺🇸 199.189.225.167

🇧🇷 189.85.105.209

🇻🇳 171.231.177.205

🇺🇸 162.241.177.22

🇫🇮 135.181.202.88

🇮🇳 103.55.89.5

🇳🇱 91.92.40.176

🇺🇸 50.62.181.92

🇺🇸 34.86.138.166

🇬🇧 2.57.17.145

🇺🇸 206.189.233.36

🇨🇴 190.184.203.182

🇵🇱 176.53.159.198

🇨🇳 124.88.113.114

🇨🇳 111.228.46.221

🇺🇸 2607:f8b0:400e:c09::129

🇰🇷 222.239.251.12