JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.48.69.70

103.48.69.70 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 30%: ?

30%

ISP	Country Online Services PVT LTD
Usage Type	Fixed Line ISP
ASN	AS136290
Domain Name	countryonline.co.in
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.48.69.70

Whois 103.48.69.70

IP Abuse Reports for 103.48.69.70:

This IP address has been reported a total of 40 times from 25 distinct sources. 103.48.69.70 was first reported on May 11th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-20 09:02:49 (1 week ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
Anonymous	2026-07-20 05:06:53 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?abluet=BmFHY7ldNvE9S,/?gqpbj=kmsefN47IYi,/?iyn=jT3ME5i3TYIug8B,/api/v1/status?jssr=AdkVXVhmfgwQ,/api/v1/status?nthrdf=rkBDqgXKcB2eKW2,/wp-admin/admin-ajax.php?hmfg=2fUQhtyjiJwArf; Country=IN; ASN=136290 Country Online Services PVT LTD show less	DDoS Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 08:18:41 (1 week ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇪🇸 el-brujo	2026-07-17 10:37:26 (1 week ago)	2026-07-17T12:37:26.250461 ns2.elhacker.net postfix/smtpd[143918]: improper command pipelining after ... show more 2026-07-17T12:37:26.250461 ns2.elhacker.net postfix/smtpd[143918]: improper command pipelining after CONNECT from unknown[103.48.69.70]: \026\003\001\000\366\001\000\000\362\003\003\345\202X\224 @\241Pcsu/\366)\235\222;\202WC%\303\361\357hx4\3778R\344z \214\376\205^\370>\350\211\247m^[A\215\312\a\372\244\032t!\256\033/\350\227\204\331^\3729p\000\030**\023\001\023\002\023\003\300,\300+\3000\300/\314\251\314\250\000\237 2026-07-17T12:37:26.252132 ns2.elhacker.net postfix/smtpd[143918]: too many errors after CONNECT from unknown[103.48.69.70] ... show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-01 12:41:10 (1 month ago)	843 limiting connections by zone (9m59s)	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-29 02:46:00 (1 month ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-05-27 11:33:30 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇫🇷 MatStef132	2026-05-22 14:04:40 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:01:56 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-04-26 08:29:54 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:21 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:05:15 (3 months ago)	103.48.69.70 - - [05/Apr/2026:16:35:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest ... show more 103.48.69.70 - - [05/Apr/2026:16:35:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:03 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:40:10 +0200] "GET /web/login HTTP/1.1" 499 0 "https://next.us/services" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:03 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:40:15 (3 months ago)	103.48.69.70 - - [05/Apr/2026:16:35:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest ... show more 103.48.69.70 - - [05/Apr/2026:16:35:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:03 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:03 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.48.69.70 - - [05/Apr/2026:16:38:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, l ... show less	DDoS Attack
🇮🇹 IRT@Unisi	2026-03-28 06:36:42 (3 months ago)	anomaly:tcp_dst_session,1001>threshold1000,repeats7995timessincelastlog	DDoS Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.27

🇵🇱 176.53.159.197

🇸🇬 165.173.21.44

🇺🇸 162.241.235.142

🇮🇹 151.59.3.68

🇹🇼 114.42.138.94

🇹🇼 103.98.73.179

🇸🇬 47.82.11.243

🇸🇬 47.82.11.233

🇧🇭 46.184.213.232

🇧🇷 45.177.195.104

🇩🇪 31.76.57.198

🇺🇸 20.163.1.211

🇳🇱 185.242.226.17

🇭🇰 156.225.1.70

🇮🇩 128.14.233.253

🇨🇳 115.203.208.114

🇸🇬 101.47.159.50

🇺🇸 66.132.195.30

🇸🇬 47.82.11.23