JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.10.55

140.213.10.55 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 27%: ?

27%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Banjarmasin, South Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.10.55

Whois 140.213.10.55

IP Abuse Reports for 140.213.10.55:

This IP address has been reported a total of 13 times from 11 distinct sources. 140.213.10.55 was first reported on September 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-20 15:04:08 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-04 12:12:14 (2 weeks ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 11:17:11 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 140.213.10.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 140.213.10.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:17:05.326586 2026] [security2:error] [pid 7408:tid 7415] [client 140.213.10.55:22343] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 140.213.10.55 (+1 hits since last alert)\|tsengkwongchi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tsengkwongchi.com"] [uri "/xmlrpc.php"] [unique_id "aiANMaLIDtlXEJIWW2JXZgAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-03 07:19:57 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-03 05:38:16 (2 weeks ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-04-30 07:44:39 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 140.213.10.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 140.213.10.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 03:44:35.758969 2026] [security2:error] [pid 21875:tid 21875] [client 140.213.10.55:15124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 140.213.10.55 (+1 hits since last alert)\|d-sinema.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d-sinema.com"] [uri "/xmlrpc.php"] [unique_id "afMIY10U2kaCZKep2pSuRAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-04-30 04:57:47 (1 month ago)	(wordpress) Failed wordpress login from 140.213.10.55 (ID/Indonesia/-): (CF_ENABLE)	Brute-Force
🇮🇩 hermawan	2026-04-04 07:32:00 (2 months ago)	04/04/2026-14:31:59.821357 [Drop] [] [1:2100000434:0] Suricata match TLS JA4 scan Uniq Zeek no 43 ... show more 04/04/2026-14:31:59.821357 [Drop] [] [1:2100000434:0] Suricata match TLS JA4 scan Uniq Zeek no 434 with hash_t13d1812h1_85036bcba153_d41ae481755e [**] [Classification: (null)] [Priority: 3] {TCP} 140.213.10.55:8418 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇸🇬 mypatricks	2026-04-03 23:55:54 (2 months ago)	140.213.10.55 \| Port: 13685 \| DNS: 140.213.10.55 2026-04-04T07:55:53+08:00 Asia/Makassar \| IPs Spam ... show more 140.213.10.55 \| Port: 13685 \| DNS: 140.213.10.55 2026-04-04T07:55:53+08:00 Asia/Makassar \| IPs Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /html5/used-popover-api-to-create-dialog-without-external-javascript/?aaeacf9abb8b=1772966678 \| Ref: https://xxxxxx/html5/used-popover-api-to-create-dialog-without-external-javascript/?aaeacf9abb8b=1772966678 \| Country: ID/Indonesia/+07:00 IP City: Banjarmasin macOS 9e6c01b35adb1edc-SIN/Singapore, Singapore 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇭 backslash	2025-08-02 06:21:21 (10 months ago)		Bad Web Bot
🇮🇩 aaKenshin	2025-06-08 18:34:06 (1 year ago)	Suspicious activity detected from IP 140.213.10.55 based on mailserver logs. Sample logs: 2025-06-09 ... show more Suspicious activity detected from IP 140.213.10.55 based on mailserver logs. Sample logs: 2025-06-09 02:31:37,396 INFO [ImapServer-2558] [ip=172.16.0.182;oip=140.213.10.55;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=10788;] imap - LOGIN elapsed=1 (NIO) 2025-06-09 02:31:49,989 INFO [ImapServer-2555] [ip=172.16.0.182;cid=10789;oip=140.213.10.55;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2025-06-09 02:31:49,991 INFO [ImapServer-2555] [ip=172.16.0.182;oip=140.213.10.55;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=10789;] imap - authentication failed for [**] (LDAP error: - unable to ldap authenticate: invalid credentials) 2025-06-09 02:31:49,991 INFO [ImapServer-2555] [ip=172.16.0.182;oip=140.213.10.55;via=com.google.android.gm,172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=10789;] account - Error occurred during show less	Brute-Force
🇷🇸 Scan	2024-11-28 00:43:31 (1 year ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 trentwiles.com	2023-09-18 03:56:39 (2 years ago)	Unauthorized connection attempt detected from IP address 140.213.10.55 to port 445 [IAD]	Port Scan Hacking

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.107

🇺🇸 2604:a880:400:d1:0:4:9e79:1

🇮🇳 2400:6180:100:d0::3ab1:1

🇨🇭 209.99.185.195

🇹🇼 198.235.24.64

🇳🇱 176.65.139.99

🇧🇷 168.90.65.197

🇮🇳 135.235.138.43

🇧🇷 118.26.105.144

🇮🇳 116.74.77.163

🇭🇰 104.28.156.225

🇹🇷 88.248.250.143

🇺🇸 66.132.195.86

🇦🇷 186.5.180.176

🇫🇮 178.20.210.208

🇨🇳 171.83.60.120

🇺🇸 159.223.193.255

🇰🇷 118.33.119.34

🇨🇳 114.221.136.195

🇳🇱 45.198.224.120