JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.138.137

140.213.138.137 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 12%: ?

12%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Mobile ISP
ASN	AS24203
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Bogor, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.138.137

Whois 140.213.138.137

IP Abuse Reports for 140.213.138.137:

This IP address has been reported a total of 11 times from 4 distinct sources. 140.213.138.137 was first reported on November 14th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-20 02:00:53 (2 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 3.8/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-20 01:00:09 (2 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 0/10 (INFORMATIONAL). Re ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-18 13:00:52 (3 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 3.5/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-18 12:00:52 (3 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 3.7/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-18 11:00:53 (3 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 3.8/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-18 10:00:09 (3 days ago)	User login to application from malicious IP 140.213.138.137.. Threat Score: 0/10 (INFORMATIONAL). Re ... show more User login to application from malicious IP 140.213.138.137.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-06 15:14:10 (2 weeks ago)	Attac	Brute-Force
🇮🇩 sockominfo	2026-04-14 17:00:42 (3 months ago)	User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-10 17:00:16 (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 hermawan	2025-10-15 16:53:10 (9 months ago)	[Wed Oct 15 23:49:36.141778 2025] [security2:error] [pid 1050821:tid 140019875407552] [client 140.21 ... show more [Wed Oct 15 23:49:36.141778 2025] [security2:error] [pid 1050821:tid 140019875407552] [client 140.213.138.137:3872] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Mobile/15E148 OcIdWebView ({\\x22isDarkTheme\\x22:true, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHT ... show less	Hacking Web App Attack
🇩🇪 IP Analyzer	2021-11-14 02:30:21 (4 years ago)	Unauthorized connection attempt from IP address 140.213.138.137 on Port 445(SMB)	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.177.72.56

🇫🇷 185.177.72.53

🇵🇭 180.194.195.188

🇺🇸 173.255.210.89

🇧🇷 168.195.27.229

🇮🇳 168.144.145.195

🇧🇷 168.0.224.215

🇩🇪 130.12.182.227

🇨🇳 122.96.28.199

🇺🇿 95.46.64.63

🇺🇸 66.207.184.232

🇺🇸 65.49.1.93

🇵🇪 45.230.251.86

🇺🇸 18.97.5.67

🇮🇳 223.181.103.65

🇰🇭 203.144.76.160

🇹🇼 198.235.24.48

🇬🇧 193.32.209.234

🇳🇮 186.77.205.242

🇫🇷 185.177.72.16