JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.48.182.138

103.48.182.138 was found in our database!

This IP was reported 538 times. Confidence of Abuse is 100%: ?

100%

ISP	Niss Internet services private limited
Usage Type	Fixed Line ISP
ASN	AS132774
Domain Name	nissbroadband.com
Country	🇮🇳 India
City	Ponneri, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.48.182.138

Whois 103.48.182.138

IP Abuse Reports for 103.48.182.138:

This IP address has been reported a total of 538 times from 136 distinct sources. 103.48.182.138 was first reported on April 12th 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-18 14:07:24 (21 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇪🇸 masterguru	2026-06-18 10:26:40 (1 day ago)	(xmlrpc) Failed xmlrpc access from 103.48.182.138 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 LRob.fr	2026-06-18 10:15:13 (1 day ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-06-18 08:57:11 (1 day ago)	103.48.182.138 - - [18/Jun/2026: ...	Brute-Force
🇳🇱 BlueWire Hosting	2026-06-17 15:09:59 (1 day ago)	Probing websites for vulnerabilities	Web App Attack
🇨🇭 4server	2026-06-17 13:48:53 (1 day ago)	[WedJun1715:48:49.2934722026][security2:error][pid1269511:tid1269820][client103.48.182.138:0]ModSecu ... show more [WedJun1715:48:49.2934722026][security2:error][pid1269511:tid1269820][client103.48.182.138:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"inserzioniticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajKlwcSy4FjZwxHQFEeEIQAAAQM\"] show less	Hacking Web App Attack
Anonymous	2026-06-17 12:09:32 (1 day ago)	103.48.182.138 - - [17/Jun/2026:14:05:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 847 "-" "Mozilla/5.0 ... show more 103.48.182.138 - - [17/Jun/2026:14:05:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 847 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:14:05:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:14:09:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 847 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:14:09:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 657 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:14:09:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 847 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-06-17 05:47:13 (2 days ago)	103.48.182.138 - - [17/Jun/2026:00:39:16 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4772 "-" "Mozilla/5. ... show more 103.48.182.138 - - [17/Jun/2026:00:39:16 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4772 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:00:45:52 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4771 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:00:46:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4771 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:00:46:46 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4773 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" 103.48.182.138 - - [17/Jun/2026:00:47:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4772 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-16 09:13:35 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇷🇴 INTEQ	2026-06-16 05:41:48 (3 days ago)	Web attack from 103.48.182.138	Web App Attack
🇫🇷 Baking333	2026-06-13 06:55:15 (6 days ago)	[redacted] 103.48.182.138 - - [13/Jun/2026:07:55:10 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/49 ... show more [redacted] 103.48.182.138 - - [13/Jun/2026:07:55:10 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/49503 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/82.0.0.0 Safari/537.36" [redacted] 103.48.182.138 - - [13/Jun/2026:07:55:13 +0100] "POST /[redacted] HTTP/1.1" 405 4877 0/54007 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/74.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-12 14:44:47 (6 days ago)	103.48.182.138 - - [12/Jun/2026:14:44:24 +0000] "POST /xmlrpc.php HTTP/2.0" 404 122 "-" "Mozilla/5.0 ... show more 103.48.182.138 - - [12/Jun/2026:14:44:24 +0000] "POST /xmlrpc.php HTTP/2.0" 404 122 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-12 12:06:34 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 rh24	2026-06-12 11:25:21 (6 days ago)	(wordpress) Failed wordpress login from 103.48.182.138 (IN/India/-): (CF_ENABLE)	Brute-Force
🇩🇪 big-cloud.nl	2026-06-12 09:07:22 (1 week ago)	Try to access /xmlrpc.php	Web App Attack

Showing 1 to 15 of 538 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.112.245.85

🇺🇸 91.230.168.253

🇫🇷 85.217.140.4

🇺🇸 64.227.0.95

🇺🇸 162.243.228.110

🇺🇸 107.152.44.215

🇨🇦 104.207.49.38

🇦🇴 102.218.85.203

🇳🇱 91.92.40.237

🇯🇵 47.91.28.169

🇱🇹 45.227.254.170

🇧🇷 43.164.196.114

🇵🇪 38.255.109.248

🇬🇧 35.203.210.76

🇺🇸 34.125.135.136

🇺🇸 34.19.116.143

🇰🇭 23.26.198.56

🇺🇸 2607:f8b0:4004:c29::128

🇺🇸 216.25.179.198

🇮🇶 185.166.25.150