JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.36

103.163.220.36 was found in our database!

This IP was reported 174 times. Confidence of Abuse is 100%: ?

100%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.36

Whois 103.163.220.36

IP Abuse Reports for 103.163.220.36:

This IP address has been reported a total of 174 times from 77 distinct sources. 103.163.220.36 was first reported on July 25th 2022, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-22 19:57:32 (14 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-21 14:36:46 (1 day ago)	103.163.220.36 - - [21/Jun/2026:17:36:45 +0300] "GET /wp-content/plugins/semrush/x.php HTTP/1.1" 404 ... show more 103.163.220.36 - - [21/Jun/2026:17:36:45 +0300] "GET /wp-content/plugins/semrush/x.php HTTP/1.1" 404 727 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-21 06:41:27 (2 days ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-21 04:55:18 (2 days ago)	103.163.220.36 - - [21/Jun/2026:07:55:17 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 404 716 "- ... show more 103.163.220.36 - - [21/Jun/2026:07:55:17 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-21 02:32:59 (2 days ago)	103.163.220.36 - - [21/Jun/2026:05:32:57 +0300] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 ... show more 103.163.220.36 - - [21/Jun/2026:05:32:57 +0300] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" 103.163.220.36 - - [21/Jun/2026:05:32:58 +0300] "GET /wp-content/plugins/wordpress-seo/wp-seo-main-float.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 [email protected]	2026-06-21 00:30:51 (2 days ago)	...	Brute-Force SSH
🇩🇪 findlab	2026-06-20 23:01:25 (2 days ago)	Backdrop CMS module - forbidden user agent	Bad Web Bot Web App Attack
Anonymous	2026-06-20 18:06:05 (2 days ago)	Bot / scanning and/or hacking attempts: GET /inputs.php HTTP/2.0, GET /wp-content/languages/plugins/ ... show more Bot / scanning and/or hacking attempts: GET /inputs.php HTTP/2.0, GET /wp-content/languages/plugins/index.php HTTP/2.0, GET /simple.php HTTP/2.0, GET /dropdown.php HTTP/2.0, GET /chosen.php HTTP/2.0, GET /wp-admin.php HTTP/2.0, GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php , GET /license.php HTTP/2.0, GET /about.php HTTP/2.0, GET /admin.php HTTP/2.0, GET /install.php HTTP/2.0, GET /bypass.php HTTP/2.0, GET /wp-admin/js/index.php HTTP/2.0, GET /style2.php HTTP/2.0, GET /wp-content/plugins/core/core.php HTTP/2.0, GET /wp-content/languages/index.php HTTP/2.0, GET /wp-admin/fmadmin.php HTTP/2.0, GET /classwithtostring.php HTTP/2.0, GET /wp-content/themes/seotheme/db.php?u HTTP/2.0, GET /wp-content/themes/pridmag/db.php?u HTTP/2.0, GET /content.php HTTP/2.0, GET /style.php HTTP/2.0, GET /4PJcpMFsD8B.php HTTP/2.0, GET /wp-admin/images/index.php HTTP/2.0, GET /config.php HTTP/2.0, GET /wp-admin/maint/index.php HTTP/2.0, GET /themes.php HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 19:03:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 15:03:31.763882 2026] [security2:error] [pid 32704:tid 32735] [client 103.163.220.36:23581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomithai.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "ajWSg_1NVXpZs6WuJs8JyQAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-06-19 14:39:14 (3 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted]): (CF_ENABLE)	Port Scan
🇫🇷 masterguru	2026-06-19 13:33:17 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
Anonymous	2026-06-18 13:22:23 (4 days ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 FeG Deutschland	2026-06-18 13:11:33 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇪🇸 masterguru	2026-06-18 06:58:47 (5 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇧🇪 cmbplf	2026-06-12 04:33:20 (1 week ago)	322 requests with url.path *config.php	Brute-Force Bad Web Bot

Showing 1 to 15 of 174 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.29

🇺🇸 194.62.107.202

🇬🇧 193.32.209.231

🇺🇸 192.178.65.20

🇨🇳 111.30.42.43

🇫🇷 85.217.140.16

🇩🇪 69.5.169.243

🇹🇼 198.235.24.99

🇪🇸 196.196.150.124

🇭🇰 118.193.39.103

🇮🇳 103.123.53.88

🇳🇱 91.92.40.47

🇺🇸 205.210.31.67

🇹🇭 147.50.227.79

🇺🇸 137.184.228.138

🇸🇬 47.84.46.250

🇮🇷 178.131.107.177

🇨🇳 152.136.204.48

🇨🇱 136.248.242.166

🇷🇴 92.118.39.231