JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.99.135.192

103.99.135.192 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 24%: ?

24%

ISP	NU INTERNET (PVT) Ltd.
Usage Type	Fixed Line ISP
ASN	AS150790
Domain Name	nuinternet.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.99.135.192

Whois 103.99.135.192

IP Abuse Reports for 103.99.135.192:

This IP address has been reported a total of 19 times from 10 distinct sources. 103.99.135.192 was first reported on March 2nd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-10-23 12:10:19 (4 days ago)	3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-10-16 19:46:26 (1 week ago)	3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 TPI-Abuse	2026-10-04 08:37:31 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 103.99.135.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.99.135.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 04:37:15.235201 2026] [security2:error] [pid 12492:tid 12492] [client 103.99.135.192:36602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|armrms.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "armrms.com"] [uri "/"] [unique_id "asIQO7oz6z-fpSrwRPgn2gAAAAY"], referer: https://onlinebacklinkcreator.site/dir/seo-optimized-backlinks-12840 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 micropedro	2026-09-29 22:52:34 (3 weeks ago)	3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 鬼影233	2026-09-26 18:43:34 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-24 22:15:14 (1 month ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-extron-hp-lenovo-aruba_networks-hyundai-amx-projectiondesign-fortinet.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 鬼影233	2026-09-24 15:17:09 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 micropedro	2026-09-09 23:47:51 (1 month ago)	3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown. show less	Port Scan
🇨🇭 ALPHANET	2026-09-07 06:35:01 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-24 09:16:32 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 micropedro	2026-08-20 10:38:12 (2 months ago)	3 incidents: port scanning. First: 2026-07-25 20:36, Last: 2026-08-20 06:38 UTC. Triggers: non-publi ... show more 3 incidents: port scanning. First: 2026-07-25 20:36, Last: 2026-08-20 06:38 UTC. Triggers: non-public-port,firewall-tcp,unknown. show less	Port Scan
🇩🇪 EGP Abuse Dept	2026-08-10 01:33:02 (2 months ago)	Scraping webshop URLs (creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-02 02:25:48 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-31 11:08:54 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-29 13:37:07 (2 months ago)	Unauthorized connection to Telnet port 23	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇳🇱 193.47.62.69

🇺🇸 185.191.171.10

🇨🇳 118.145.238.60

🇨🇿 78.44.192.210

🇷🇴 2.57.122.238

🇵🇱 217.28.145.105

🇬🇧 193.163.125.147

🇨🇳 180.76.185.216

🇫🇮 172.83.253.173

🇨🇦 148.113.242.74

🇵🇱 145.239.85.111

🇳🇱 138.226.239.90

🇷🇺 109.194.108.203

🇰🇪 102.204.14.213

🇳🇱 45.148.10.157

🇫🇷 37.72.141.17

🇪🇨 27.50.14.202

🇨🇳 211.91.184.23

🇨🇳 115.190.243.99