JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.110.48.134

103.110.48.134 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 40%: ?

40%

ISP	Excitel Broadband Private Limited
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	excitel.com
Country	🇮🇳 India
City	Kanpur, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.110.48.134

Whois 103.110.48.134

IP Abuse Reports for 103.110.48.134:

This IP address has been reported a total of 21 times from 19 distinct sources. 103.110.48.134 was first reported on December 2nd 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-07-17 13:33:40 (2 days ago)	(wordpress) Failed wordpress login from 103.110.48.134 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 09:21:06 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.110.48.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.110.48.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 05:20:58.866648 2026] [security2:error] [pid 5270:tid 5270] [client 103.110.48.134:63797] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.110.48.134 (+1 hits since last alert)\|kbalan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kbalan.com"] [uri "/xmlrpc.php"] [unique_id "alnz-pCG9kcKfHDLF0sgbAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:44:14 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.110.48.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.110.48.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:44:07.686102 2026] [security2:error] [pid 19021:tid 19021] [client 103.110.48.134:51158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.110.48.134 (+1 hits since last alert)\|gerrytolentino.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gerrytolentino.net"] [uri "/xmlrpc.php"] [unique_id "alndR3Ree4R0fqfm9Ir1pgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 04:59:55 (3 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.gr.log ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 Dolphi	2026-07-17 04:40:05 (3 days ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-17 04:07:05 (3 days ago)	103.110.48.134 - - [17/Jul/2026:00:05:49 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress. ... show more 103.110.48.134 - - [17/Jul/2026:00:05:49 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 103.110.48.134 - - [17/Jul/2026:00:06:11 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 103.110.48.134 - - [17/Jul/2026:00:06:21 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 103.110.48.134 - - [17/Jul/2026:00:06:54 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" 103.110.48.134 - - [17/Jul/2026:00:07:04 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5560 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-17 04:04:07 (3 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
Anonymous	2026-05-11 19:47:25 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇵🇱 mkey	2026-05-07 07:55:03 (2 months ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-05-07 09:51:32 \| LAST=2026-05-07 09:51:33. Last seen 2026-05-07 09:51:34. show less	Port Scan
🇫🇷 Hiigara	2026-05-04 20:31:20 (2 months ago)	connection attempt : 103.110.48.134 on port : tcp/23 (Telnet)	Port Scan
Anonymous	2026-05-04 12:33:22 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 cybsecaoccol	2026-05-03 18:43:35 (2 months ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇺🇸 MPL	2026-05-03 03:19:46 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 thororen	2026-05-03 03:06:05 (2 months ago)	Blocked by UFW [2323/tcp] Source port: 57076 TTL: 47 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2323/tcp] Source port: 57076 TTL: 47 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-05-02 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.232.79.58

🇮🇳 103.68.31.76

🇺🇸 66.132.186.228

🇺🇸 65.35.3.50

🇱🇹 62.60.130.210

🇩🇪 46.101.125.174

🇸🇬 4.193.178.28

🇺🇸 216.218.206.107

🇷🇺 195.239.107.150

🇮🇩 180.252.172.80

🇨🇳 110.249.201.106

🇭🇰 103.210.21.242

🇳🇱 91.92.42.147

🇨🇦 85.217.149.61

🇬🇧 81.19.219.240

🇲🇾 66.23.162.13

🇺🇸 52.176.211.73

🇹🇼 36.236.176.186

🇺🇸 20.84.145.62

🇺🇸 18.191.58.47