JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.161.55.199

103.161.55.199 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 15%: ?

15%

ISP	M N Cable Vision
Usage Type	Fixed Line ISP
ASN	AS138754
Hostname(s)	keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com
Domain Name	keralavisionisp.com
Country	🇮🇳 India
City	Thrissur, Kerala

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.161.55.199

Whois 103.161.55.199

IP Abuse Reports for 103.161.55.199:

This IP address has been reported a total of 22 times from 17 distinct sources. 103.161.55.199 was first reported on May 14th 2022, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-09-16 21:58:51 (21 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 grassau.com	2026-09-16 21:04:31 (22 hours ago)	(wordpress) Failed wordpress login from 103.161.55.199 (IN/India/Kerala/Thrissur/keralavisionisp-dyn ... show more (wordpress) Failed wordpress login from 103.161.55.199 (IN/India/Kerala/Thrissur/keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com) show less	Brute-Force
🇳🇱 ipoac.nl	2026-03-05 06:10:51 (6 months ago)	2026-03-05T07:10:50.698586+01:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 103 ... show more 2026-03-05T07:10:50.698586+01:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 103.161.55.199 show less	Web App Attack
🇧🇾 lns.bz	2026-03-05 01:46:13 (6 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 17:37:33 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55. ... show more (mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 12:37:26.461557 2026] [security2:error] [pid 29162:tid 29162] [client 103.161.55.199:26338] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|caddydad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caddydad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaht1hH2V63X3cC7BOy1xgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-04 11:19:03 (6 months ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 mnsf	2026-03-04 10:06:12 (6 months ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇮🇩 Burayot	2026-03-04 07:02:54 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.161.55.199 (IN/India/keralavisi ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.161.55.199 (IN/India/keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 ipoac.nl	2026-03-04 03:49:31 (6 months ago)	2026-03-04T04:49:30.031615+01:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown ... show more 2026-03-04T04:49:30.031615+01:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown user 91686 from 103.161.55.199 show less	Web App Attack
🇺🇸 nationaleventpros.com	2026-03-03 14:01:29 (6 months ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-03-03 10:23:59 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55. ... show more (mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 05:23:52.564968 2026] [security2:error] [pid 31270:tid 31270] [client 103.161.55.199:62928] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cienmalos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cienmalos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaa2uChiW9upeLQF3gn3VQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-03 05:48:36 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55. ... show more (mod_security) mod_security (id:225170) triggered by 103.161.55.199 (keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 00:48:28.651442 2026] [security2:error] [pid 2167:tid 2167] [client 103.161.55.199:37990] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|batfry.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "batfry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaZ2LD9gGzcNyh_mR04gigAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-03-03 05:06:33 (6 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇦🇺 screwlooseit.com.au	2026-03-02 13:36:09 (6 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com	Web App Attack
🇩🇪 konseptit	2026-03-02 12:43:57 (6 months ago)	(wordpress) Failed wordpress login from 103.161.55.199 (IN/India/keralavisionisp-dynamic-199.55.161. ... show more (wordpress) Failed wordpress login from 103.161.55.199 (IN/India/keralavisionisp-dynamic-199.55.161.103.keralavisionisp.com) show less	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.182.50.52

🇧🇩 202.40.190.150

🇬🇧 35.203.211.110

🇰🇷 210.182.73.137

🇭🇰 203.83.11.146

🇭🇰 202.155.236.242

🇸🇬 185.200.116.46

🇳🇱 159.223.8.65

🇳🇱 91.92.40.36

🇭🇰 43.129.193.109

🇺🇸 192.178.11.97

🇧🇷 179.48.18.42

🇸🇪 171.25.158.57

🇨🇳 106.55.254.60

🇨🇳 106.52.146.234

🇨🇳 14.17.85.226

🇰🇷 220.116.252.176

🇲🇦 160.179.43.203

🇲🇦 160.178.6.192

🇺🇸 137.184.226.250