JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.120.71.131

103.120.71.131 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 24%: ?

24%

ISP	TElCOMASTERS PVT. LTD.
Usage Type	Fixed Line ISP
ASN	AS137047
Hostname(s)	point.yyww.telcomaster.com
Domain Name	telcomaster.com
Country	🇵🇰 Pakistan
City	Gujranwala, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.120.71.131

Whois 103.120.71.131

IP Abuse Reports for 103.120.71.131:

This IP address has been reported a total of 29 times from 25 distinct sources. 103.120.71.131 was first reported on October 11th 2021, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-06-24 05:58:03 (4 days ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇸🇬 mypatricks	2026-06-24 05:28:49 (4 days ago)	103.120.71.131 \| Port: 13548 \| DNS: point.yyww.telcomaster.com 2026-06-24T13:28:48+08:00 Asia/Karach ... show more 103.120.71.131 \| Port: 13548 \| DNS: point.yyww.telcomaster.com 2026-06-24T13:28:48+08:00 Asia/Karachi \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1752509635&bea9e8a99f8daebeb=114 \| Ref: - \| Country: PK/Pakistan/+05:00 IP City: Gujranwala a10954c74ad664ca-SIN/Singapore, Singapore 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-05-13 07:15:31 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 nodepile	2026-05-06 05:09:59 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/1/image/270x/f4b5615c55446ca4acf532638b23ad11/2/_/2_2459_41.jpg ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-05-01 04:43:40 (1 month ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-04-23 11:19:42 (2 months ago)	Fail2Ban: 103.120.71.131 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.120.71.131 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-17 07:20:08 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 103.120.71.131 (point.yyww.telcomaster.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 103.120.71.131 (point.yyww.telcomaster.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 03:19:58.863447 2026] [security2:error] [pid 1910365:tid 1910365] [client 103.120.71.131:54913] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jerryfeil.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jerryfeil.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeHfHuQA7Cb-h_0pXjmaHwAAAAA"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-04-15 23:25:08 (2 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: status.elhacker.net userAgent: Mozilla/5.0 (Wi ... show more Cloudflare WAF: Request Path: / Request Query: Host: status.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'\|\|(SELECT 'nssrq7V8' WHERE 2948=2948,UPDATEXML(5054,CONCAT('.','~',(SELECT/**/(ELT(5054=5054,1))),'~'),3340))\|\|' Action: log Source: firewallManaged ASN Description: TATMPL-AS-AP TELECOMMUNICATION AND TECHNOLOGY MASTERS PVT. LIMITED Country: PK Method: GET Timestamp: 2026-04-15T23:25:08Z ruleId: 3b0c61407d0b4f7d87e516472116d2fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 octageeks.com	2026-03-04 05:26:48 (3 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 matt	2026-03-02 21:21:43 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇩🇪 filstal.org	2026-02-20 17:31:44 (4 months ago)	Mail Brute-Force: User-Enum & Legacy Targeting	Brute-Force
🇺🇸 TPI-Abuse	2026-02-15 12:15:54 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 103.120.71.131 (point.yyww.telcomaster.com): 1 ... show more (mod_security) mod_security (id:210730) triggered by 103.120.71.131 (point.yyww.telcomaster.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:15:46.104842 2026] [security2:error] [pid 32187:tid 32187] [client 103.120.71.131:44694] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|banis-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "banis-associates.com"] [uri "/journeytoaclosedcity.com"] [unique_id "aZG48hry4vq346VjsQ-T5AAAAA4"], referer: http://banis-associates.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-26 07:40:36 (5 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
Anonymous	2025-11-17 20:35:16 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-10-19 13:02:12 (8 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.156.229.133

🇧🇷 200.219.200.16

🇩🇪 64.89.163.173

🇫🇷 54.37.118.68

🇨🇳 202.112.237.201

🇲🇱 197.155.167.152

🇬🇦 154.0.184.47

🇨🇳 121.229.156.18

🇻🇳 116.96.24.25

🇨🇳 106.13.109.25

🇩🇪 62.133.60.87

🇯🇵 8.216.16.144

🇨🇳 182.127.120.242

🇮🇩 182.8.249.98

🇨🇳 123.138.77.51

🇳🇵 120.89.112.216

🇧🇩 103.153.110.190

🇺🇸 45.130.83.239

🇭🇰 8.218.153.16

🇩🇪 167.94.146.46