JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.120.71.159

103.120.71.159 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 33%: ?

33%

ISP	TElCOMASTERS PVT. LTD.
Usage Type	Fixed Line ISP
ASN	AS137047
Hostname(s)	gateway.uurr.telcomaster.com
Domain Name	telcomaster.com
Country	🇵🇰 Pakistan
City	Gujranwala, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.120.71.159

Whois 103.120.71.159

IP Abuse Reports for 103.120.71.159:

This IP address has been reported a total of 33 times from 22 distinct sources. 103.120.71.159 was first reported on August 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-06-11 08:05:04 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0') show less	Web App Attack Exploited Host
Anonymous	2026-06-10 02:15:19 (3 days ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/10950/form_key/AsDv6l5u88vt4uKc/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 0a9278f2-ffb8-4472-8b4f-87e634c16433	DDoS Attack
Anonymous	2026-05-15 15:50:17 (4 weeks ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇺🇸 TPI-Abuse	2026-05-15 14:53:31 (4 weeks ago)	(mod_security) mod_security (id:217210) triggered by 103.120.71.159 (gateway.uurr.telcomaster.com): ... show more (mod_security) mod_security (id:217210) triggered by 103.120.71.159 (gateway.uurr.telcomaster.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 10:53:21.728088 2026] [security2:error] [pid 7010:tid 7010] [client 103.120.71.159:32914] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|top66me.online\|F\|4"] [data "GET http://top66me.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "top66me.online"] [uri "/"] [unique_id "agczYXX8ur5_VIxz2KsiNwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-05-09 16:16:46 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇳🇱 Mangelot Hosting	2026-04-17 02:55:22 (1 month ago)	(wp_login_try) srv103 WP Login Attempt 103.120.71.159 (PK/Pakistan/gateway.uurr.telcomaster.com): 10 ... show more (wp_login_try) srv103 WP Login Attempt 103.120.71.159 (PK/Pakistan/gateway.uurr.telcomaster.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 stechusa	2026-04-12 04:38:20 (2 months ago)	ELEVATED_THREAT \| country=PK \| ASN=TELECOMMUNICATION AND TECHNOLOGY MASTERS PVT. LIMITED \| AbuseIPDB ... show more ELEVATED_THREAT \| country=PK \| ASN=TELECOMMUNICATION AND TECHNOLOGY MASTERS PVT. LIMITED \| AbuseIPDB=31% \| 9 IPs targeting /room.html \| HTTP/1.1 over TLS (elevated=True) \| Facet request during elevated threat (facet_ratio=0.45, unique_ips=86) show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-04-12 04:38:20 (2 months ago)	[Askari] \| country=PK \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 ove ... show more [Askari] \| country=PK \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages show less	Bad Web Bot DDoS Attack
Anonymous	2026-04-09 08:33:52 (2 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 06:22:47 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 103.120.71.159 (gateway.uurr.telcomaster.com): ... show more (mod_security) mod_security (id:210730) triggered by 103.120.71.159 (gateway.uurr.telcomaster.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:22:38.516697 2026] [security2:error] [pid 8065:tid 8065] [client 103.120.71.159:47999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|luckypupdesigns.com\|F\|2"] [data ".austinloftydog.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "luckypupdesigns.com"] [uri "/www.austinloftydog.com"] [unique_id "ac9crgV3_ZgoKNoWe6hmogAAAAk"], referer: http://luckypupdesigns.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-04-02 03:03:56 (2 months ago)	Fail2Ban: 103.120.71.159 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.120.71.159 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-03-31 14:07:48 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 stechusa	2026-03-28 07:37:40 (2 months ago)	[Askari] \| country=PK \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Con ... show more [Askari] \| country=PK \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-03-28 07:37:39 (2 months ago)	ELEVATED_THREAT \| country=PK \| ASN=TELECOMMUNICATION AND TECHNOLOGY MASTERS PVT. LIMITED \| AbuseIPDB ... show more ELEVATED_THREAT \| country=PK \| ASN=TELECOMMUNICATION AND TECHNOLOGY MASTERS PVT. LIMITED \| AbuseIPDB=31% \| 19 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.75, unique_ips=155) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 223.204.246.161

🇺🇸 136.144.35.183

🇨🇳 112.94.252.62

🇺🇸 64.62.156.69

🇨🇳 60.191.164.109

🇨🇳 27.18.104.12

🇱🇹 188.69.225.188

🇨🇳 171.36.7.85

🇺🇸 130.131.162.246

🇨🇳 123.144.29.40

🇺🇸 103.143.231.24

🇩🇪 94.26.83.115

🇺🇸 64.236.153.81

🇸🇬 45.82.78.106

🇧🇪 34.156.191.228

🇰🇷 211.106.137.135

🇧🇷 205.210.31.158

🇮🇳 202.191.1.10

🇲🇽 187.191.48.9

🇺🇾 179.27.99.9