AbuseIPDB » 103.85.9.17
103.85.9.17
This IP was reported 9 times. Confidence of
Abuse
is 47% : ?
ISP
Vaji Communications Pvt. Ltd.
Usage Type
Fixed Line ISP
ASN
AS45916
Domain Name
gtpl.net
Country
🇮🇳
India
City
Ahmedabad, Gujarat
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.85.9.17 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
103.85.9.17 was first reported on
March 5th 2026 , and the most recent report was
11 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-27 13:47:32
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.85.9.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 103.85.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:47:29.160886 2026] [security2:error] [pid 519577:tid 519577] [client 103.85.9.17:42126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.85.9.17 (+1 hits since last alert)|cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cajunpicasso.com"] [uri "/xmlrpc.php"] [unique_id "amdhcfofA4uqUhuldk1NHQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-07-27 12:11:14
(13 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-07-27 11:29:48
(14 hours ago)
(wordpress) Failed wordpress login from 103.85.9.17 (IN/India/-)
Brute-Force
🇩🇪
ghostwarriors
2026-07-27 07:20:34
(18 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-07-27 07:13:36
(18 hours ago)
(wordpress) Failed wordpress login from 103.85.9.17 (IN/India/-)
Brute-Force
2026-07-27 07:12:35
(18 hours ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 12:10:43
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 103.85.9.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 103.85.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:10:36.612633 2026] [security2:error] [pid 1488194:tid 1488194] [client 103.85.9.17:22523] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.85.9.17 (+1 hits since last alert)|fundingworkingcapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fundingworkingcapital.com"] [uri "/xmlrpc.php"] [unique_id "amNWPEIDErR2HnRCEfk3YQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-10 10:53:05
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-03-05 03:03:11
(4 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: