JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.248.49

103.163.248.49 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 23%: ?

23%

ISP	Splus Media Private Limited
Usage Type	Fixed Line ISP
ASN	AS136336
Domain Name	splusmedia.in
Country	🇮🇳 India
City	Puducherry, Puducherry

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.248.49

Whois 103.163.248.49

IP Abuse Reports for 103.163.248.49:

This IP address has been reported a total of 10 times from 10 distinct sources. 103.163.248.49 was first reported on August 22nd 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-18 13:20:13 (2 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-18 13:16:56 (2 days ago)	[redacted] 103.163.248.49 - - [18/Sep/2026:15:16:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 103.163.248.49 - - [18/Sep/2026:15:16:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.163.248.49 - - [18/Sep/2026:15:16:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site11203783.com" [redacted] 103.163.248.49 - - [18/Sep/2026:15:16:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site10592798.com" [redacted] 103.163.248.49 - - [18/Sep/2026:15:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.163.248.49 - - [18/Sep/2026:15:16:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site13632609.com" ... show less	Hacking Web App Attack
🇩🇪 LRob	2026-09-18 11:34:13 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php \| ua: Jetpack by WordPress.com \| 2026-09-18 11:34 UTC show less	Hacking Web App Attack
🇩🇪 ps-center	2024-11-26 12:26:19 (1 year ago)	ABV: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2023-11-06 03:25:59 (2 years ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 Epimetheus	2023-10-04 02:46:20 (2 years ago)	Unauthorized access attempts: From: 103.163.248.49 Method: HTTP GET URI Path: /v2/34226fc7-5e8 ... show more Unauthorized access attempts: From: 103.163.248.49 Method: HTTP GET URI Path: /v2/34226fc7-5e85-43af-9f1c-1c186e99793a UA: "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-GB) WindowsPowerShell/5.1.22621.1778" show less	Web App Attack
🇫🇮 bittiguru.fi	2023-06-03 12:00:41 (3 years ago)	103.163.248.49 - [03/Jun/2023:15:00:38 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 ( ... show more 103.163.248.49 - [03/Jun/2023:15:00:38 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-" 103.163.248.49 - [03/Jun/2023:15:00:41 +0300] "POST /xmlrpc.php HTTP/1.1" 404 46052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 Carltonfsck	2022-10-24 08:38:19 (3 years ago)	Oct 24 12:37:33 ssh1 postfix/smtpd[38929]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 450 4 ... show more Oct 24 12:37:33 ssh1 postfix/smtpd[38929]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [103.163.248.49]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.163.248.49]> Oct 24 12:38:00 ssh1 postfix/smtpd[38929]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [103.163.248.49]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.163.248.49]> Oct 24 12:38:18 ssh1 postfix/smtpd[38929]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [103.163.248.49]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.163.248.49]> ... show less	Email Spam Hacking
🇸🇬 Sean64	2022-02-12 01:38:02 (4 years ago)	Feb 12 14:38:01 sean postfix/smtpd[3004874]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 554 ... show more Feb 12 14:38:01 sean postfix/smtpd[3004874]: NOQUEUE: reject: RCPT from unknown[103.163.248.49]: 554 5.7.1 Service unavailable; Client host [103.163.248.49] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.163.248.49; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.163.248.49]> ... show less	Email Spam Brute-Force
Anonymous	2021-08-22 07:37:39 (5 years ago)	Aug 22 04:37:38 c220-vlx sshd[891855]: User admin from 103.163.248.49 not allowed because listed in ... show more Aug 22 04:37:38 c220-vlx sshd[891855]: User admin from 103.163.248.49 not allowed because listed in DenyUsers Aug 22 04:37:38 c220-vlx sshd[891855]: Failed none for invalid user admin from 103.163.248.49 port 17994 ssh2 ... show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.162.17.141

🇩🇪 213.95.11.49

🇷🇺 212.164.26.40

🇺🇸 207.90.244.6

🇺🇸 158.94.211.60

🇨🇳 119.86.198.146

🇨🇦 104.253.66.179

🇫🇮 104.28.254.16

🇮🇹 93.51.116.48

🇷🇺 89.239.145.99

🇺🇸 66.132.224.83

🇺🇸 47.202.232.139

🇩🇰 46.29.235.249

🇨🇳 36.129.129.28

🇺🇸 34.86.183.13

🇬🇧 2a06:4880:c000::e6

🇰🇷 211.251.245.88

🇨🇳 211.95.80.122

🇨🇭 205.188.0.78

🇭🇰 203.160.86.32