JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.48.71.196

103.48.71.196 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 44%: ?

44%

ISP	Country Online Services PVT LTD
Usage Type	Fixed Line ISP
ASN	AS136290
Domain Name	countryonline.co.in
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.48.71.196

Whois 103.48.71.196

IP Abuse Reports for 103.48.71.196:

This IP address has been reported a total of 24 times from 19 distinct sources. 103.48.71.196 was first reported on January 28th 2026, and the most recent report was 47 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-10-16 20:56:43 (47 minutes ago)	Autoban IP(2): 103.48.71.196 - Hostname: Country Online Services PVT LTD - City: Hyderabad - Country ... show more Autoban IP(2): 103.48.71.196 - Hostname: Country Online Services PVT LTD - City: Hyderabad - Country: India - Organization: Country Online Services PVT LTD - Reason: GET /?j=bznnt99gmm19053nnxdjxp HTTP/1.1 show less	Web App Attack
Anonymous	2026-10-14 17:02:25 (2 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-14 13:37:37 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 103.48.71.196 (countryonline): 1 in the last 30 ... show more (mod_security) mod_security (id:225170) triggered by 103.48.71.196 (countryonline): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:37:31.978286 2026] [security2:error] [pid 26329:tid 26329] [client 103.48.71.196:60952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|buanamegah.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-Fm13zsn9llxaU4maqqAAAAAc"], referer: https://buanamegah.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-09 04:38:41 (1 week ago)	🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.	Web App Attack
🇨🇿 Countryman	2026-09-30 00:10:01 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-29 20:54:50 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 103.48.71.196 2026-09-29T22:22:13+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 103.48.71.196 2026-09-29T22:22:13+02:00 vpn Access-Reject 'kodera' station: 103.48.71.196 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-09-23 09:59:32 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 10:34:23 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-03 16:16:55 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 06:05:05 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-08-26 13:01:11 (1 month ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 鬼影233	2026-08-24 08:23:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-26 23:02:01 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 SX Communications	2026-07-21 17:31:19 (2 months ago)	HTTP application-layer DoS / botnet traffic from 103.48.71.196: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 103.48.71.196: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-06-20 06:07:28 (3 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /communications/videoconference.html?___SID=1cb00eaa9f6b4dd023a8e9c25b47efedU&dir=asc&limit=80&onSale=1&order=most_viewed \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 203.190.13.149

🇨🇦 85.217.149.60

🇸🇦 34.166.109.173

🇳🇱 2a0f:ca80:b00b:b1dc::5

🇺🇦 2a03:2880:f265:e0:face:b00c:0:6e2e

🇺🇸 216.73.217.101

🇳🇱 193.47.62.69

🇰🇷 175.198.18.3

🇬🇧 167.172.50.164

🇨🇳 112.46.213.219

🇮🇹 93.66.215.249

🇺🇸 66.132.186.137

🇧🇷 200.219.200.16

🇦🇷 200.114.99.36

🇨🇱 186.20.114.194

🇭🇰 152.32.225.117

🇮🇩 114.141.59.196

🇨🇳 113.95.241.112

🇩🇪 89.163.146.129

🇬🇧 86.38.187.55