JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.187.221

140.213.187.221 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.187.221

Whois 140.213.187.221

IP Abuse Reports for 140.213.187.221:

This IP address has been reported a total of 18 times from 17 distinct sources. 140.213.187.221 was first reported on March 9th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Kinsei Engineering Inc.	2026-03-09 00:43:58 (3 months ago)	UFW:High-frequency access to non-released ports used by software with known vulnerabilities.	Port Scan
🇸🇬 securejdprop	2026-03-07 08:11:20 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound). Ip 140.213.187.221 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-03-07 08:11:19.54015308 +0000 UTC show less	Hacking Web App Attack
🇺🇸 LotPhantom	2026-03-07 08:06:17 (3 months ago)	140.213.187.221 - - [07/Mar/2026:08:05:17 +0000] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; ... show more 140.213.187.221 - - [07/Mar/2026:08:05:17 +0000] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "0" ... show less	Web App Attack
🇬🇧 kiwi.network	2026-03-07 02:41:40 (3 months ago)	Web application fingerprinting: 140.213.187.221 - - [07/Mar/2026:04:41:36 0200] "GET /.env HTTP/1.1 ... show more Web application fingerprinting: 140.213.187.221 - - [07/Mar/2026:04:41:36 0200] "GET /.env HTTP/1.1" 403 596 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "targethostIP" "80" 140.213.187.221 - - [07/Mar/2026:04:41:36 0200] "POST / HTTP/1.1" 404 593 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "targethostIP" "80" 140.213.187.221 - - [07/Mar/2026:04:41:38 0200] "GET /.env HTTP/1.1" 403 2072 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "targethostIP" "443" 140.213.187.221 - - [07/Mar/2026:04:41:39 0200] "POST / HTTP/1.1" 401 1995 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "targethostIP" "443" show less	Hacking Web App Attack Exploited Host
🇺🇸 jfz-abuse	2026-03-06 23:35:48 (3 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇸🇬 anotherwatcher	2026-03-06 23:27:15 (3 months ago)	bad bot	Bad Web Bot
Anonymous	2026-03-05 23:07:00 (3 months ago)	"GET /.env HTTP/1.1" "POST / HTTP/1.1"	Bad Web Bot Web App Attack
🇳🇱 lns.bz	2026-03-05 21:00:05 (3 months ago)	.env scanning [DOPP]	Web App Attack
🇩🇪 Holger	2026-03-05 13:15:43 (3 months ago)	URL probing: GET /.env	Web App Attack
🇺🇸 technojoe99	2026-03-05 12:47:32 (3 months ago)	Exploit scan from 140.213.187.221. GET /.env HTTP/1.1.	Web App Attack
🇬🇧 Andrew	2026-03-05 12:44:02 (3 months ago)	Blocked by UFW (TCP on port 80). Source port: 28336 TTL: 116 Packet length: 52 TOS: 0x00 This repor ... show more Blocked by UFW (TCP on port 80). Source port: 28336 TTL: 116 Packet length: 52 TOS: 0x00 This report (for 140.213.187.221) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-03-05 04:32:02 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 aks4226	2026-03-05 02:57:58 (3 months ago)	Attacking common web apps.	Web App Attack
🇳🇱 bazter.pro	2026-03-05 01:41:31 (3 months ago)	140.213.187.221 - - [05/Mar/2026:01:41:31 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; ... show more 140.213.187.221 - - [05/Mar/2026:01:41:31 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 Mykola Spesivtsev	2026-03-05 00:32:06 (3 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 show less	Port Scan Web App Attack Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 81.192.46.36

🇺🇸 216.213.27.227

🇳🇱 176.65.148.184

🇫🇮 147.185.133.66

🇰🇷 125.138.175.113

🇸🇪 45.159.12.190

🇳🇱 45.148.10.157

🇺🇸 34.229.217.15

🇯🇵 130.33.164.246

🇩🇪 64.89.163.178

🇨🇦 23.236.166.224

🇳🇱 213.152.161.54

🇺🇾 167.57.91.2

🇷🇴 141.98.83.240

🇮🇹 79.40.60.117

🇲🇾 60.54.104.102

🇧🇷 2804:d59:b926:ce00:5895:be12:91f6:21f6

🇨🇳 220.197.14.60

🇨🇭 209.99.185.195

🇮🇳 183.82.33.90