AbuseIPDB » 140.213.165.82
140.213.165.82
This IP was reported 4 times. Confidence of
Abuse
is 13% : ?
ISP
PT XLSMART Telecom Sejahtera Tbk
Usage Type
Mobile ISP
ASN
AS24203
Domain Name
xl.co.id
Country
🇮🇩
Indonesia
City
Semarang, Central Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 140.213.165.82 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
140.213.165.82 was first reported on
January 30th 2025 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-06-19 13:54:04
(3 days ago)
140.213.165.82 - - [19/Jun/2026:15:53:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 624 "-" "Jetpack by ...
show more
140.213.165.82 - - [19/Jun/2026:15:53:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 624 "-" "Jetpack by WordPress.com"
140.213.165.82 - - [19/Jun/2026:15:53:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com"
140.213.165.82 - - [19/Jun/2026:15:53:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 624 "-" "Jetpack/12.0; WordPress/6.2; http://site94172414.com"
140.213.165.82 - - [19/Jun/2026:15:53:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.0; WordPress/6.2; http://site94172414.com"
140.213.165.82 - - [19/Jun/2026:15:54:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 624 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
...
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-19 13:54:01
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇮🇩
hermawan
2025-11-12 07:57:06
(7 months ago)
[Wed Nov 12 14:56:20.414132 2025] [security2:error] [pid 20801:tid 139967096796864] [client 140.213. ...
show more
[Wed Nov 12 14:56:20.414132 2025] [security2:error] [pid 20801:tid 139967096796864] [client 140.213.165.82:12280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: UTF-8 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Musim/2025/Musim_Kemarau_2025/Infografis_Prediksi_Musim_Kemarau_Tahun_2025_Provinsi_Jawa_Timur.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Musim/2025/Musim_Kemarau_2025/Infografis_Prediksi_Musim_Kemarau_Tahun_2025_Provinsi_Jawa_Timur.jpg"] [unique_id "aRQ9pMPxPPi-hcQwdwAXPQACggA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[20802] [UfI+GaHDnaI] [aRQ9pMPxPPi-hcQwdwAXPQACggA] keep_al
...
show less
Hacking
Web App Attack
2025-01-30 02:58:39
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: