JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.170.55.11

103.170.55.11 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 21%: ?

21%

ISP	Kerala Vision Broad Band Private Limited
Usage Type	Fixed Line ISP
ASN	AS138754
Hostname(s)	keralavisionisp-dynamic-11.55.170.103.keralavisionisp.com
Domain Name	keralavisionisp.com
Country	🇮🇳 India
City	Kollam, Kerala

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.170.55.11

Whois 103.170.55.11

IP Abuse Reports for 103.170.55.11:

This IP address has been reported a total of 28 times from 20 distinct sources. 103.170.55.11 was first reported on July 5th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-16 20:33:37 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.17 ... show more (mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.170.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:33:29.603690 2026] [security2:error] [pid 16343:tid 16343] [client 103.170.55.11:32165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.170.55.11 (+1 hits since last alert)\|capitalswisscorp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "capitalswisscorp.com"] [uri "/xmlrpc.php"] [unique_id "ajGzGUrMidPUnPcq8z42aQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 20:06:48 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.17 ... show more (mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.170.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:06:42.370766 2026] [security2:error] [pid 23455:tid 23455] [client 103.170.55.11:21058] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.170.55.11 (+1 hits since last alert)\|kawkacevents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kawkacevents.com"] [uri "/xmlrpc.php"] [unique_id "ajGs0vxDE4nyxc43smhk3gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 12:42:38 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.17 ... show more (mod_security) mod_security (id:240335) triggered by 103.170.55.11 (keralavisionisp-dynamic-11.55.170.103.keralavisionisp.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 08:42:32.747186 2026] [security2:error] [pid 7141:tid 7141] [client 103.170.55.11:24656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.170.55.11 (+1 hits since last alert)\|altoshp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "altoshp.com"] [uri "/xmlrpc.php"] [unique_id "ajFEuGr49wIQNZJ9lhHjSgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇦🇺 trentwiles.com	2026-05-12 03:01:25 (1 month ago)	Unauthorized connection attempt detected from IP address 103.170.55.11 to port 23 [SYD]	Port Scan
🇯🇵 mkaraki	2026-05-04 01:57:29 (1 month ago)	1777859844 # Service_probe # SIGNATURE_SEND # source_ip:103.170.55.11 # dst_port:445 ...	Port Scan
🇫🇷 Coco Bongo	2026-04-05 11:08:11 (2 months ago)	1775387291 - 04/05/2026 13:08:11 Host: 103.170.55.11/103.170.55.11 Port: 445 TCP Blocked ...	Port Scan
Anonymous	2026-04-04 23:01:40 (2 months ago)	Try to connect to Port_Scan_445_stealth	Port Scan
🇫🇷 geeek	2026-04-04 08:45:00 (2 months ago)	Port scanning: 445 TCP Blocked	Port Scan
🇬🇧 Birdo	2026-04-02 12:45:42 (2 months ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇩🇪 check-the-sum.fr	2026-04-02 08:56:15 (2 months ago)	Port Scanning	Port Scan
Anonymous	2026-02-03 05:23:53 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-02-02 05:10:11 (4 months ago)	Unauthorized connection to SMB port 445	Port Scan
Anonymous	2026-01-22 08:35:10 (4 months ago)	1769070910 - 01/22/2026 09:35:10 Host: 103.170.55.11/103.170.55.11 Port: 445 TCP Blocked ...	Port Scan
🇺🇸 MPL	2026-01-11 12:08:13 (5 months ago)	tcp/23 (4 or more attempts)	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.212

🇺🇸 143.42.227.223

🇺🇸 104.243.35.104

🇳🇱 91.92.40.204

🇷🇺 83.246.133.16

🇳🇱 45.148.10.152

🇷🇴 2.57.121.25

🇸🇪 185.246.128.133

🇳🇱 45.148.10.147

🇷🇺 37.204.111.153

🇺🇸 216.25.89.69

🇨🇳 183.199.181.53

🇨🇳 101.96.200.79

🇧🇷 45.229.91.34

🇨🇦 45.39.103.183

🇧🇷 186.215.107.189

🇺🇸 172.236.126.175

🇧🇷 152.67.46.203

🇳🇱 85.17.179.58

🇬🇧 35.203.211.99