JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.174.164.248

103.174.164.248 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 84%: ?

84%

ISP	Navkar Netsol Private Ltd
Usage Type	Fixed Line ISP
ASN	AS136634
Hostname(s)	host103-174-164-248.navkarnet.net
Domain Name	navkarnetsol.com
Country	🇮🇳 India
City	Ahmedabad, Gujarat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.174.164.248

Whois 103.174.164.248

IP Abuse Reports for 103.174.164.248:

This IP address has been reported a total of 87 times from 52 distinct sources. 103.174.164.248 was first reported on October 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-25 11:46:08 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-07-25 06:34:39 (1 day ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit ... show more CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/82.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇬🇧 NotCool	2026-07-25 06:02:18 (1 day ago)	[7200] (XMLRPC,ABUSIVEBOT) Login failure/trigger from 103.174.164.248 (IN/India/host103-174-164-248. ... show more [7200] (XMLRPC,ABUSIVEBOT) Login failure/trigger from 103.174.164.248 (IN/India/host103-174-164-248.navkarnet.net): 50 in the last 3600 secs show less	Brute-Force
🇪🇸 Gem	2026-07-24 22:18:33 (2 days ago)	Unauthorized web scan.	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 07:03:40 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 103.174.164.248 (host103-174-164-248.navkarnet. ... show more (mod_security) mod_security (id:225170) triggered by 103.174.164.248 (host103-174-164-248.navkarnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 03:03:34.914575 2026] [security2:error] [pid 457496:tid 457496] [client 103.174.164.248:54378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jazziiafoundation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziiafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "amBrRhndVeqscOu4lkUc1gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 09:51:53 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 103.174.164.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.174.164.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 05:51:36.974686 2026] [security2:error] [pid 10905:tid 10922] [client 103.174.164.248:54456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tnccivic.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tnccivic.org"] [uri "/wp-json/wp/v2/users"] [unique_id "al3vqNO0OTZS26NgH9IZOQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-07-20 07:52:16 (6 days ago)	103.174.164.248 - - [20/Jul/2026:09:52:16 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 103.174.164.248 - - [20/Jul/2026:09:52:16 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-11 08:55:07 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇪🇸 SweetHoneyPress	2026-07-10 04:06:20 (2 weeks ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1020060 \| UA: Mozilla/5.0 (Windows NT 6.3; x64) A ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1020060 \| UA: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36 show less	Web App Attack Brute-Force
🇪🇸 SweetHoneyPress	2026-07-10 00:59:21 (2 weeks ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1016597 \| UA: Mozilla/5.0 (Windows NT 6.2; x64) A ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1016597 \| UA: Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/74.0.0.0 Safari/537.36 show less	Web App Attack Brute-Force
🇪🇸 SweetHoneyPress	2026-07-10 00:06:28 (2 weeks ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1016438 \| UA: Mozilla/5.0 (Windows NT 6.3; arm64) ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=1016438 \| UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36 show less	Web App Attack Brute-Force
🇨🇴 adalbertoreyes.org	2026-07-09 17:34:30 (2 weeks ago)	CategoryPortScan	Port Scan
🇬🇧 consul.to	2026-07-09 07:36:28 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 chronos	2026-07-06 06:50:22 (2 weeks ago)	[AUTORAVALT][[06/07/2026 - 03:50:20 -03:00 UTC] Attack from [VIJAY KUMBHAR] [103.174.164.248]-[RANGE ... show more [AUTORAVALT][[06/07/2026 - 03:50:20 -03:00 UTC] Attack from [VIJAY KUMBHAR] [103.174.164.248]-[RANGE:103.174.164.0 - 103.174.165.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> A] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-07-06 04:24:38 (2 weeks ago)	[AUTORAVALT][[06/07/2026 - 01:24:38 -03:00 UTC] Attack from [VIJAY KUMBHAR] [103.174.164.248]-[RANGE ... show more [AUTORAVALT][[06/07/2026 - 01:24:38 -03:00 UTC] Attack from [VIJAY KUMBHAR] [103.174.164.248]-[RANGE:103.174.164.0 - 103.174.165.255] [host103-174-164-248.navkarnet.net] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-com] ... show less	Hacking Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.182

🇩🇪 130.12.180.174

🇮🇳 103.187.78.189

🇬🇧 2.57.17.117

🇩🇪 213.209.159.228

🇲🇫 193.248.1.112

🇺🇸 173.255.223.124

🇳🇱 158.94.210.203

🇦🇺 110.173.134.43

🇨🇳 106.13.7.239

🇺🇸 103.228.85.44

🇨🇦 89.251.0.84

🇮🇶 65.20.132.172

🇹🇼 60.199.224.55

🇺🇸 45.194.67.28

🇧🇪 34.76.129.45

🇺🇸 18.188.189.58

🇨🇳 220.202.112.128

🇬🇧 157.245.34.56

🇮🇳 143.110.183.139