JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.200

103.163.220.200 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 35%: ?

35%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.200

Whois 103.163.220.200

IP Abuse Reports for 103.163.220.200:

This IP address has been reported a total of 198 times from 84 distinct sources. 103.163.220.200 was first reported on March 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dealpickeal	2026-07-27 14:53:39 (1 day ago)	Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 103.163.220 ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 103.163.220.200 Application: Azure Active Directory PowerShell Event time (UTC): 7/24/2026 20:32 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less	Brute-Force Hacking
🇬🇧 consul.to	2026-07-27 05:29:55 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-15 18:36:00 (1 week ago)	Web Probe / Attack NCT	Web App Attack
Anonymous	2026-06-22 23:50:01 (1 month ago)	103.163.220.200 - - [23/Jun/2026:01:49:58 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://fem ... show more 103.163.220.200 - - [23/Jun/2026:01:49:58 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 103.163.220.200 - - [23/Jun/2026:01:49:58 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 103.163.220.200 - - [23/Jun/2026:01:49:59 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 103.163.220.200 - - [23/Jun/2026:01:50:00 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 103.163 ... show less	Brute-Force Web App Attack
🇯🇵 ki3	2026-06-21 17:37:18 (1 month ago)	Fail2Ban: Web App Attacks and Forum Spam 103.163.220.200 1782063437(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2026-06-21 02:05:58 (1 month ago)	103.163.220.200 - - [21/Jun/2026:04:05:54 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://fem ... show more 103.163.220.200 - - [21/Jun/2026:04:05:54 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" 103.163.220.200 - - [21/Jun/2026:04:05:55 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 103.163.220.200 - - [21/Jun/2026:04:05:56 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 103.163.220.200 - - [21/Jun/2026:04:05:57 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 103.163.220.200 - - [21/Jun/2026:04:05:57 + ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-20 22:08:18 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 backslash	2026-06-17 13:03:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇬🇧 consul.to	2026-06-16 22:10:26 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 ghostwarriors	2026-06-14 21:20:42 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-06-14 12:38:10 (1 month ago)	Web App Attack Exploid from 103.163.220.200	Web App Attack
Anonymous	2026-06-14 12:36:48 (1 month ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 nyt	2026-06-09 11:59:24 (1 month ago)	CGI Probe, Suspicious access to wp-conflg.php file	Web App Attack
🇳🇱 Site.eu	2026-06-09 11:07:02 (1 month ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-06-09 04:32:09 (1 month ago)	103.163.220.200 - - [09/Jun/2026:06:32:05 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://fem ... show more 103.163.220.200 - - [09/Jun/2026:06:32:05 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" 103.163.220.200 - - [09/Jun/2026:06:32:06 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 OPR/120.0.0.0" 103.163.220.200 - - [09/Jun/2026:06:32:07 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 103.163.220.200 - - [09/Jun/2026:06:32:07 +0200] "POST /wp-login.php HTTP/1.1" 200 7226 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139. ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 161.248.202.88

🇭🇰 161.248.14.223

🇱🇹 141.98.10.195

🇸🇬 118.194.235.105

🇨🇳 115.227.49.23

🇵🇹 109.49.6.114

🇰🇷 61.76.112.4

🇺🇸 23.247.177.131

🇺🇸 23.247.177.115

🇹🇭 202.29.220.106

🇺🇸 173.239.214.212

🇮🇳 124.253.104.69

🇺🇸 107.172.57.42

🇫🇷 86.234.27.25

🇨🇳 58.213.107.138

🇳🇱 45.148.10.141

🇺🇸 45.43.57.5

🇺🇸 35.237.160.128

🇺🇸 23.247.176.244

🇺🇸 2604:a880:400:d1:0:4:c244:1