JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.176.96.131

103.176.96.131 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 8%: ?

ISP	PT Global Sarana Elektronika
Usage Type	Fixed Line ISP
ASN	AS147131
Hostname(s)	ip.131-96.g-fiber.co.id
Domain Name	g-fiber.co.id
Country	🇮🇩 Indonesia
City	Purwakarta, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.176.96.131

Whois 103.176.96.131

IP Abuse Reports for 103.176.96.131:

This IP address has been reported a total of 14 times from 13 distinct sources. 103.176.96.131 was first reported on April 24th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-05-17 04:10:48 (3 weeks ago)	DZBOT: [MTA] Brute-force users	Brute-Force
Anonymous	2026-04-27 03:28:11 (1 month ago)	DDOS attack	DDoS Attack
🇫🇷 Szymekk	2026-04-06 20:33:30 (2 months ago)	DDoS attack detected by Snarenet agent agent-1	DDoS Attack
🇩🇪 NoaQT	2026-04-05 22:06:28 (2 months ago)	103.176.96.131 - - [05/Apr/2026:16:41:20 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.c ... show more 103.176.96.131 - - [05/Apr/2026:16:41:20 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:16:54:18 +0200] "GET /web/login HTTP/1.1" 499 0 "https://online-modern.net/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:16:54:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.TNPWtn.co/about" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:16:59:36 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:16:54:18 +0200] "GET /web/login HTTP/1.1" 499 0 "https://online-modern.net/" "Mozilla/ ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:39:45 (2 months ago)	103.176.96.131 - - [05/Apr/2026:17:37:57 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.techsi ... show more 103.176.96.131 - - [05/Apr/2026:17:37:57 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.techsite.biz/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:17:38:09 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:17:39:11 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:17:39:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.176.96.131 - - [05/Apr/2026:17:38:09 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagra ... show less	DDoS Attack
🇷🇸 Smel	2026-03-13 06:04:02 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Anonymous	2026-03-13 05:39:27 (2 months ago)	Authentication failure	Brute-Force
🇺🇸 bigscoots.com	2026-03-11 17:29:48 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 103.176.96.131 (ID/Indonesia/ip.131-96.g-fiber.co.id): 5 in t ... show more (smtpauth) Failed SMTP AUTH login from 103.176.96.131 (ID/Indonesia/ip.131-96.g-fiber.co.id): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-11 13:24:31 dovecot_plain authenticator failed for H=(Z69Q27X) [103.176.96.131]:52233: 535 Incorrect authentication data ([email protected]) 2026-03-11 13:24:37 dovecot_login authenticator failed for H=(Z69Q27X) [103.176.96.131]:52233: 535 Incorrect authentication data ([email protected]) 2026-03-11 13:29:40 dovecot_plain authenticator failed for H=(L7V1JJ7) [103.176.96.131]:54891: 535 Incorrect authentication data ([email protected]) 2026-03-11 13:29:44 dovecot_plain authenticator failed for H=(PMAJ2FF461FCD) [103.176.96.131]:54893: 535 Incorrect authentication data ([email protected]) 2026-03-11 13:29:47 dovecot_login authenticator failed for H=(L7V1JJ7) [103.176.96.131]:54891: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-03-02 16:40:05 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 103.176.96.131 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Indonesia] Agressive IP 103.176.96.131 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇹 VHosting	2026-02-24 10:34:17 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇧🇪 cmbplf	2026-02-22 04:20:19 (3 months ago)	1076 limiting connections by zone (11m59s)	DDoS Attack
🇮🇳 liveaspankaj	2026-02-20 23:37:22 (3 months ago)	DDoS attack: 117 requests in 5m (GET / or repair.php).	DDoS Attack
🇧🇬 cheatmaster.store	2025-06-03 19:44:22 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇬🇧 Silly Development	2025-04-24 04:50:21 (1 year ago)	Malicious activity detected from 147131 IDNIC-GFIBER-AS-ID PT Global Sarana Elektronika towards host ... show more Malicious activity detected from 147131 IDNIC-GFIBER-AS-ID PT Global Sarana Elektronika towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-04-24T04:50:21Z (25 occurrences) show less	DDoS Attack Hacking Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 123.49.38.114

🇮🇳 117.200.81.111

🇷🇴 80.94.92.167

🇺🇸 2604:a880:400:d1:0:4:8bf4:7001

🇮🇳 172.253.211.215

🇺🇸 129.146.202.228

🇷🇴 80.94.92.171

🇺🇸 64.62.156.201

🇳🇱 45.148.10.67

🇦🇿 217.64.23.204

🇬🇧 213.166.84.50

🇺🇸 172.253.83.80

🇺🇸 134.122.125.153

🇺🇸 104.243.42.167

🇺🇸 104.164.158.165

🇮🇷 94.101.184.145

🇭🇺 91.137.249.146

🇺🇸 47.89.180.120

🇳🇱 131.153.158.213

🇮🇩 103.41.247.76