JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.1.8

140.213.1.8 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 8%: ?

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.1.8

Whois 140.213.1.8

IP Abuse Reports for 140.213.1.8:

This IP address has been reported a total of 14 times from 11 distinct sources. 140.213.1.8 was first reported on December 14th 2022, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 arsonist	2026-08-31 07:27:42 (21 hours ago)	This IP accessed the path /Sketchy/trailblazer-colony-14/raw/commit/d1370de758c2a46e5a54e3884460fd2c ... show more This IP accessed the path /Sketchy/trailblazer-colony-14/raw/commit/d1370de758c2a46e5a54e3884460fd2c69a913ab/.envrc, which is banned. Powered by ListenCaddy show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-22 14:53:20 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇷🇺 Agrohim	2025-11-08 00:34:59 (9 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇮🇩 aaKenshin	2025-10-31 12:42:46 (10 months ago)	Suspicious activity detected from IP 140.213.1.8 based on mailserver logs. Sample logs: 2025-10-31 2 ... show more Suspicious activity detected from IP 140.213.1.8 based on mailserver logs. Sample logs: 2025-10-31 20:42:33,158 INFO [ImapServer-1064] [ip=172.16.0.182;oip=140.213.1.8;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=1407;] imap - LOGIN elapsed=2 (NIO) 2025-10-31 20:42:45,046 INFO [ImapServer-1064] [ip=172.16.0.182;cid=1408;oip=140.213.1.8;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2025-10-31 20:42:45,049 INFO [ImapServer-1064] [ip=172.16.0.182;oip=140.213.1.8;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=1408;] imap - authentication failed for [**] (LDAP error: - unable to ldap authenticate: invalid credentials) 2025-10-31 20:42:45,049 INFO [ImapServer-1064] [ip=172.16.0.182;oip=140.213.1.8;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=1408;] account - Error occurred during authenticatio show less	Brute-Force
🇮🇩 hermawan	2025-10-29 22:32:21 (10 months ago)	[Thu Oct 30 05:04:46.355346 2025] [security2:error] [pid 223283:tid 140406183413440] [client 140.213 ... show more [Thu Oct 30 05:04:46.355346 2025] [security2:error] [pid 223283:tid 140406183413440] [client 140.213.1.8:12218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "%3Clink" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "67"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: %3Clink found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel= request_line = GET /index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel= HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel="] [unique_id "aQKPflpQnrjiDGL7Ix-DRwACxAQ"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan [staklim-malang.info] [staklim-malang.info] top=[223305] [EzqpUVPDL/I] [aQKPflpQnrjiDGL7Ix-DRwACxAQ] keep_aliv ... show less	Hacking Web App Attack
🇩🇪 KPS	2024-05-30 02:15:43 (2 years ago)	PortscanM	Port Scan
Anonymous	2024-03-20 16:21:48 (2 years ago)	Ports: 110,995; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇩🇪 KPS	2023-07-15 21:53:53 (3 years ago)	PortscanM	Port Scan
🇮🇩 RasyiidWho	2023-05-11 12:30:23 (3 years ago)	ip112.20 . 2023-05-11 19:30:22 340024 [Warning] Access denied for user 'root'@'140.213.1.8' (using p ... show more ip112.20 . 2023-05-11 19:30:22 340024 [Warning] Access denied for user 'root'@'140.213.1.8' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2023-03-08 07:00:20 (3 years ago)	ip112.20 . 2023-03-08 14:00:20 129035 [Warning] Access denied for user 'root'@'140.213.1.8' (using p ... show more ip112.20 . 2023-03-08 14:00:20 129035 [Warning] Access denied for user 'root'@'140.213.1.8' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 MPL	2023-02-28 04:12:23 (3 years ago)	tcp/445 (3 or more attempts)	Port Scan
🇺🇸 MPL	2023-02-28 01:24:12 (3 years ago)	tcp/445 (3 or more attempts)	Port Scan
Anonymous	2023-01-13 07:05:29 (3 years ago)	Jan 13 08:05:28 ns3104219 postfix/smtpd[21998]: NOQUEUE: reject: RCPT from unknown[140.213.1.8]: 450 ... show more Jan 13 08:05:28 ns3104219 postfix/smtpd[21998]: NOQUEUE: reject: RCPT from unknown[140.213.1.8]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [140.213.1.8]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[140.213.1.8]> ... show less	Email Spam Web App Attack
🇩🇪 IP Analyzer	2022-12-14 23:00:51 (3 years ago)	Unauthorized connection attempt from IP address 140.213.1.8 on Port 445(SMB)	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.206.164

🇨🇳 220.250.63.67

🇬🇧 193.163.125.52

🇺🇸 185.191.171.2

🇺🇸 173.187.152.204

🇨🇳 122.242.251.143

🇳🇱 107.189.26.103

🇸🇬 103.187.147.71

🇺🇸 98.82.132.251

🇨🇦 85.217.149.74

🇺🇸 64.202.132.172

🇮🇳 59.179.31.237

🇹🇭 58.10.73.253

🇸🇪 45.84.107.76

🇹🇼 35.234.38.138

🇧🇪 34.76.154.164

🇳🇱 204.76.203.7

🇷🇴 193.32.162.84

🇳🇱 185.2.80.253

🇨🇳 175.20.96.204