JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.28

103.163.220.28 was found in our database!

This IP was reported 178 times. Confidence of Abuse is 90%: ?

90%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.28

Whois 103.163.220.28

IP Abuse Reports for 103.163.220.28:

This IP address has been reported a total of 178 times from 76 distinct sources. 103.163.220.28 was first reported on June 21st 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-06-24 02:11:05 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 Viveronese	2026-06-21 12:35:57 (4 days ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-21 06:47:12 (4 days ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-21 02:33:38 (4 days ago)	103.163.220.28 - - [21/Jun/2026:05:33:37 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/ ... show more 103.163.220.28 - - [21/Jun/2026:05:33:37 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" 103.163.220.28 - - [21/Jun/2026:05:33:37 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-06-21 00:20:40 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 findlab	2026-06-20 23:01:00 (4 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 19:05:51 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.28 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 15:05:46.859231 2026] [security2:error] [pid 32705:tid 32765] [client 103.163.220.28:57349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomithai.com"] [uri "/wp-content/wp-config.php"] [unique_id "ajWTCigdgKAWY-2w5q6zkgAAAYk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-19 13:40:25 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-19 09:47:55 (6 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-18 13:24:44 (1 week ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 FeG Deutschland	2026-06-18 13:10:54 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇪🇸 masterguru	2026-06-18 06:49:02 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇧🇪 cmbplf	2026-06-12 01:40:25 (1 week ago)	208 requests with url.path *config.php	Brute-Force Bad Web Bot
🇳🇱 BlueWire Hosting	2026-06-11 21:33:01 (1 week ago)	Probing websites for vulnerabilities	Web App Attack
Anonymous	2026-05-27 14:50:37 (4 weeks ago)	[Wed May 27 16:47:08.925874 2026] [proxy_fcgi:error] [pid 2621:tid 2668] [client 103.163.220.28:2255 ... show more [Wed May 27 16:47:08.925874 2026] [proxy_fcgi:error] [pid 2621:tid 2668] [client 103.163.220.28:22557] AH01071: Got error 'Primary script unknown', referer: http://www.akcurate.de/wp-includes/js/tinymce/themes/api.php [Wed May 27 16:47:09.559301 2026] [proxy_fcgi:error] [pid 2621:tid 2667] [client 103.163.220.28:22557] AH01071: Got error 'Primary script unknown', referer: http://www.akcurate.de/wp-includes/js/tinymce/plugins/wp-load.php [Wed May 27 16:50:12.310969 2026] [proxy_fcgi:error] [pid 1359:tid 1542] [client 103.163.220.28:63467] AH01071: Got error 'Primary script unknown', referer: http://www.akcurate.de/wp-includes/ID3/module.tag.lyrics3-class.php [Wed May 27 16:50:36.328303 2026] [proxy_fcgi:error] [pid 1360:tid 1479] [client 103.163.220.28:25487] AH01071: Got error 'Primary script unknown', referer: http://www.akcurate.de/min.php [Wed May 27 16:50:36.963288 2026] [proxy_fcgi:error] [pid 1360:tid 1468] [client 103.163.220.28:25487] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 178 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 121.165.187.77

🇮🇳 4.224.40.94

🇨🇳 221.182.185.190

🇧🇷 200.53.21.249

🇺🇸 172.172.237.72

🇺🇸 162.216.150.54

🇺🇸 162.216.149.45

🇵🇰 154.57.216.142

🇺🇸 107.181.228.82

🇦🇷 104.239.73.222

🇰🇪 102.206.206.72

🇹🇷 88.230.204.13

🇺🇸 88.216.42.11

🇫🇷 85.217.140.34

🇫🇷 85.217.140.24

🇵🇱 74.248.112.30

🇧🇷 45.205.1.209

🇺🇸 20.15.225.72

🇯🇴 5.45.137.196

🇳🇱 2a00:1450:4013:c05::127