JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.99.135.216

103.99.135.216 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 36%: ?

36%

ISP	NU INTERNET (PVT) Ltd.
Usage Type	Fixed Line ISP
ASN	AS150790
Domain Name	nuinternet.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.99.135.216

Whois 103.99.135.216

IP Abuse Reports for 103.99.135.216:

This IP address has been reported a total of 28 times from 19 distinct sources. 103.99.135.216 was first reported on March 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-24 21:45:15 (2 days ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
Anonymous	2026-10-19 02:44:41 (1 week ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
Anonymous	2026-10-16 17:02:18 (1 week ago)	Honeypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/2023-08/mis ... show more Honeypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/2023-08/misc/donations_v8.docx show less	Web App Attack
Anonymous	2026-10-16 04:30:47 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-10-15 04:05:24 (1 week ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 10:51:51 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 103.99.135.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.99.135.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 06:51:34.478125 2026] [security2:error] [pid 8017:tid 8121] [client 103.99.135.216:42462] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|buick-reatta.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "buick-reatta.com"] [uri "/"] [unique_id "ar-MttPOw3CT_GbXpowosAAAAYk"], referer: https://backlinkmonitor.space/dir/natural-seo-backlinks-30434 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 08:18:27 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 06:49:20 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 14:46:57 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 hbrks	2026-09-18 11:23:22 (1 month ago)	PMG Antispam: Postscreen PREGREET violation	Email Spam
🇺🇸 鬼影233	2026-09-18 06:44:51 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-07 14:43:35 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 pscriptos	2026-08-31 21:03:55 (1 month ago)	{"ClientAddr":"103.99.135.216:54534","ClientHost":"103.99.135.216","ClientPort":"54534","ClientUsern ... show more {"ClientAddr":"103.99.135.216:54534","ClientHost":"103.99.135.216","ClientPort":"54534","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":138462501,"OriginContentSize":418,"OriginDuration":135247569,"OriginStatus":403,"Overhead":3214932,"RequestAddr":"www.cleveradmin.de","RequestContentSize":714,"RequestCount":5684975,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-08-31T23:03:33.983391208+02:00","StartUTC":"2026-08-31T21:03:33.983391208Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-08-31T23:03:34+02:00"} {"ClientAddr":"103.99.135.216:54534","ClientHost":"103.99.135.216","ClientPort" ... show less	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-08-28 07:33:59 (1 month ago)	(wordpress) Failed wordpress login from 103.99.135.216 (PK/Pakistan/-)	Brute-Force
🇺🇸 鬼影233	2026-08-25 11:13:48 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.187.148

🇭🇰 152.32.191.191

🇿🇦 102.66.152.178

🇺🇸 34.56.230.66

🇵🇪 190.239.55.53

🇺🇦 185.209.56.248

🇩🇪 162.19.252.77

🇩🇪 138.124.66.203

🇵🇰 110.38.234.222

🇧🇩 103.151.60.214

🇸🇮 102.220.161.170

🇸🇬 94.231.206.252

🇷🇴 80.94.92.179

🇨🇳 61.142.255.146

🇸🇿 41.211.46.181

🇮🇹 34.154.96.238

🇺🇸 20.80.105.137

🇮🇩 202.158.36.50

🇮🇶 185.136.148.42

🇧🇴 181.188.176.242