JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.220.96

103.163.220.96 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 47%: ?

47%

ISP	XS Usenet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	xsusenet.com
Country	🇯🇵 Japan
City	Asagaya-minami, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.220.96

Whois 103.163.220.96

IP Abuse Reports for 103.163.220.96:

This IP address has been reported a total of 170 times from 56 distinct sources. 103.163.220.96 was first reported on January 29th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-23 09:30:15 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.96 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:30:11.880105 2026] [security2:error] [pid 23847:tid 23959] [client 103.163.220.96:48639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.managementlaw.com"] [uri "/wp-content/wp-config.php"] [unique_id "ajpSI7oZRgAKgez6t-LFZgAAAcE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 00:41:00 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 103.163.220.96 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.163.220.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:40:55.148280 2026] [security2:error] [pid 23111:tid 23111] [client 103.163.220.96:49945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.majesticsolutions.co"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajnWFx-EGGJFFohfLdQ71AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-17 20:28:53 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 solution.it	2026-06-10 20:05:36 (1 week ago)	[Wed Jun 10 22:05:36.347008 2026] [php7:error] [pid 2698095:tid 2698095] [client 103.163.220.96:5502 ... show more [Wed Jun 10 22:05:36.347008 2026] [php7:error] [pid 2698095:tid 2698095] [client 103.163.220.96:55025] script '/var/www/html/blog.solution.it/wp-content/uploads/admin.php' not found or unable to stat, referer: http://blog.solution.it/wp-content/uploads/admin.php show less	Web App Attack
🇳🇱 Site.eu	2026-06-05 12:56:09 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-05 11:18:52 (2 weeks ago)	Aggressive web search of vulnerable pages: /wolf.php /postnews.php /maxro.php /wp-content/plugins/ak ... show more Aggressive web search of vulnerable pages: /wolf.php /postnews.php /maxro.php /wp-content/plugins/akismet/_inc/img/PRffc.php /wp-content/wpvivi ... show less	Web App Attack
🇨🇭 backslash	2026-06-04 21:51:02 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 ghostwarriors	2026-05-28 13:50:07 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-05-28 06:09:00 (3 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-05-28 02:14:51 (3 weeks ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 103 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 103.163.220.96 (JP/Japan/-) show less	Brute-Force
Anonymous	2026-05-01 17:19:40 (1 month ago)	103.163.220.96 - - [01/May/2026:19:19:36 +0200] "GET /wp-content/themes/calmly/issue.php HTTP/1.0" 4 ... show more 103.163.220.96 - - [01/May/2026:19:19:36 +0200] "GET /wp-content/themes/calmly/issue.php HTTP/1.0" 404 62101 "-" "Go-http-client/1.1" 103.163.220.96 - - [01/May/2026:19:19:36 +0200] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 404 14517 "-" "Go-http-client/1.1" 103.163.220.96 - - [01/May/2026:19:19:37 +0200] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.0" 404 62101 "-" "Go-http-client/1.1" 103.163.220.96 - - [01/May/2026:19:19:38 +0200] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 14517 "-" "Go-http-client/1.1" 103.163.220.96 - - [01/May/2026:19:19:38 +0200] "GET /wp-content/plugins/shell/noimg.php HTTP/1.0" 404 62101 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-01 10:05:18 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-28 22:29:12 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026-04-28 00:36:44 /platform 2026-04-28 00:36:44 /gateway 2026-04-28 04:58:23 /internal 2026-04-28 00:36:44 /monitoring show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-26 22:24:15 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026-04-26 22:17:04 /backend 2026-04-26 20:00:51 /healthcheck 2026-04-26 17:36:56 /devops show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-25 22:23:49 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026 ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/103.163.220.96 2026-04-25 18:54:12 /system 2026-04-25 16:15:03 /sys 2026-04-25 16:15:03 /mgmt 2026-04-25 16:41:20 /private/actuator show less	Web App Attack

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.255.126.30

🇺🇸 162.216.150.109

🇳🇱 138.226.239.10

🇺🇸 129.213.106.214

🇳🇵 113.199.244.30

🇺🇸 104.238.220.228

🇨🇳 101.42.102.180

🇷🇴 92.118.39.223

🇨🇦 85.217.149.12

🇮🇶 83.171.206.251

🇰🇷 61.76.38.54

🇩🇴 152.0.250.255

🇺🇸 150.107.38.251

🇺🇸 141.11.88.5

🇯🇵 47.74.33.105

🇺🇸 23.81.70.178

🇨🇳 211.91.58.39

🇳🇱 192.42.116.99

🇨🇱 190.22.39.150

🇦🇴 102.214.3.182