JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.247.13.131

103.247.13.131 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	Warnet pelem
Usage Type	Fixed Line ISP
ASN	AS131706
Hostname(s)	ip-131-13-247.terabit.net.id
Domain Name	terabit.net.id
Country	🇮🇩 Indonesia
City	Gombong, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.247.13.131

Whois 103.247.13.131

IP Abuse Reports for 103.247.13.131:

This IP address has been reported a total of 49 times from 24 distinct sources. 103.247.13.131 was first reported on January 30th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-04-26 08:29:53 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:08:45 (2 months ago)	103.247.13.131 - - [05/Apr/2026:16:30:53 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagr ... show more 103.247.13.131 - - [05/Apr/2026:16:30:53 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.247.13.131 - - [05/Apr/2026:16:34:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.modern.biz/news" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.247.13.131 - - [05/Apr/2026:16:45:46 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.247.13.131 - - [05/Apr/2026:16:53:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://social22.uk/home" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.247.13.131 - - [05/Apr/2026:16:56:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.fa ... show less	DDoS Attack
🇮🇹 IRT@Unisi	2026-03-28 14:53:08 (2 months ago)	anomaly:tcp_dst_session,1001>threshold1000,repeats21926timessincelastlog	DDoS Attack
Anonymous	2026-03-23 06:31:24 (3 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.247.13.131 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.247.13.131 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇳🇱 maxxsense	2026-03-05 22:39:34 (3 months ago)	103.247.13.131 (ID/Indonesia/ip-131-13-247.terabit.net.id), 12 distributed imapd attacks on account ... show more 103.247.13.131 (ID/Indonesia/ip-131-13-247.terabit.net.id), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
🇬🇧 gtabomber	2026-03-04 10:58:00 (3 months ago)	2026-03-04T10:57:45.436005 espaceonline.co.uk auth[11445]: pam_unix(dovecot:auth): authentication fa ... show more 2026-03-04T10:57:45.436005 espaceonline.co.uk auth[11445]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=103.247.13.131 2026-03-04T10:57:47.329163 espaceonline.co.uk dovecot[23296]: auth-worker(11445): pam([email protected],103.247.13.131,<SyCcsDBMKpFn9w2D>): unknown user (given password: Geewa19111) 2026-03-04T10:57:49.741278 espaceonline.co.uk dovecot[23296]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=103.247.13.131, lip=176.126.240.132, TLS: Disconnected, session=<SyCcsDBMKpFn9w2D> ... show less	Brute-Force SSH
🇵🇱 IROK	2026-03-04 00:55:23 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇨🇳 ThreatBook.io	2025-12-28 23:48:48 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.247.13.131	Brute-Force
🇨🇳 ThreatBook.io	2025-12-26 23:59:43 (6 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.247.13.131	Brute-Force
🇮🇳 Mcshield.org	2025-11-30 23:36:24 (6 months ago)	Connection closed by 103.247.13.131 [preauth] or weird packet	Brute-Force SSH
🇩🇪 1gz	2025-09-29 21:51:58 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_7) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.813.0 Safari/535.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Silly Development	2025-09-29 20:52:20 (8 months ago)	Malicious activity detected from 131706 TERABIT-AS-ID PT SELARAS CITRA TERABIT towards host sillydev ... show more Malicious activity detected from 131706 TERABIT-AS-ID PT SELARAS CITRA TERABIT towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:20Z (1 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 1gz	2025-09-24 15:00:48 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Silly Development	2025-09-05 03:59:57 (9 months ago)	Malicious activity detected from 131706 TERABIT-AS-ID PT SELARAS CITRA TERABIT towards host panel.si ... show more Malicious activity detected from 131706 TERABIT-AS-ID PT SELARAS CITRA TERABIT towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-09-05T03:59:57Z (3 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 1gz	2025-08-31 15:03:24 (9 months ago)	Triggered Cloudflare WAF (ratelimit) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (ratelimit) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /auth/login UA: HetrixTools Uptime Monitoring Bot. https://hetrix.tools/uptime-monitoring-bot.html This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4882:5000::64

🇩🇪 194.187.176.5

🇳🇱 185.223.235.20

🇺🇸 162.216.149.173

🇺🇸 147.185.132.50

🇨🇳 120.48.124.81

🇳🇱 81.19.216.70

🇳🇱 64.89.162.38

🇫🇷 213.136.70.200

🇳🇱 195.178.110.30

🇨🇳 171.83.167.89

🇭🇰 165.154.1.18

🇭🇰 152.32.169.155

🇮🇳 103.76.59.180

🇸🇬 103.13.206.152

🇪🇸 90.160.113.253

🇩🇪 64.89.163.152

🇬🇧 5.226.140.85

🇺🇸 203.88.119.100

🇩🇪 194.187.176.92