JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.84

103.163.220.84 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 48%: ?

48%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.84

Whois 103.163.220.84

IP Abuse Reports for 103.163.220.84:

This IP address has been reported a total of 162 times from 63 distinct sources. 103.163.220.84 was first reported on January 29th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 mgarofano80	2026-06-17 19:35:28 (4 days ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 18:34:37 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 103.163.220.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.163.220.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:34:30.992762 2026] [security2:error] [pid 31343:tid 31343] [client 103.163.220.84:33983] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.163.220.84 (+1 hits since last alert)\|tripeak.llc\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tripeak.llc"] [uri "/xmlrpc.php"] [unique_id "ajLotigO-MTx4Z_EUbNhAAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-11 03:56:25 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 solution.it	2026-06-10 20:05:58 (1 week ago)	[Wed Jun 10 22:05:57.305714 2026] [php7:error] [pid 2679242:tid 2679242] [client 103.163.220.84:6444 ... show more [Wed Jun 10 22:05:57.305714 2026] [php7:error] [pid 2679242:tid 2679242] [client 103.163.220.84:64449] script '/var/www/html/blog.solution.it/1.php' not found or unable to stat, referer: http://blog.solution.it/1.php show less	Web App Attack
🇩🇪 LRob.fr	2026-06-06 08:15:09 (2 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 Octopuce	2026-06-05 11:16:07 (2 weeks ago)	Aggressive web search of vulnerable pages: /inputs.php /edit-tags.php /admin.php /wpx/ /wp-content/p ... show more Aggressive web search of vulnerable pages: /inputs.php /edit-tags.php /admin.php /wpx/ /wp-content/plugins/Nxploited/Nx.php /filemanager.php /g ... show less	Web App Attack
🇨🇭 backslash	2026-06-04 21:48:06 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 ghostwarriors	2026-05-28 13:50:26 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-27 19:58:49 (3 weeks ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 103 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 103.163.220.84 (JP/Japan/-) show less	Brute-Force
🇺🇸 mnsf	2026-05-01 13:11:01 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-28 22:29:22 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026-04-28 00:36:44 /infra 2026-04-28 00:36:44 /devops 2026-04-28 04:58:23 /service 2026-04-28 04:58:23 / 2026-04-28 00:36:44 /healthcheck show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-27 22:31:51 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026-04-27 00:51:57 /mgmt show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-26 22:24:24 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.84 2026-04-26 12:41:09 /backend/actuator 2026-04-26 18:02:21 /mgmt 2026-04-26 22:17:04 /monitor 2026-04-26 11:56:07 /gateway 2026-04-26 22:17:04 /health 2026-04-26 11:56:07 /private/actuator 2026-04-26 12:41:08 /devops 2026-04-26 11:56:08 /internal 2026-04-26 12:41:09 /system 2026-04-26 22:45:17 /mgmt show less	Web App Attack
🇺🇸 mnsf	2026-04-23 14:05:13 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇨🇭 backslash	2026-04-23 01:33:06 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.231.140.137

🇺🇸 199.58.185.11

🇧🇷 152.67.46.203

🇨🇳 218.13.26.42

🇸🇪 171.25.158.68

🇮🇪 80.233.59.29

🇸🇬 47.84.13.41

🇧🇷 45.179.3.125

🇿🇦 41.76.213.235

🇺🇸 18.118.31.206

🇷🇴 193.46.255.86

🇳🇱 176.65.139.66

🇰🇷 125.139.124.120

🇰🇷 118.37.214.187

🇺🇸 195.184.76.242

🇬🇧 193.163.125.242

🇧🇷 179.191.82.115

🇳🇱 158.94.210.205

🇨🇭 37.120.213.13

🇮🇶 185.166.25.150