JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.190.153

140.213.190.153 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 12%: ?

12%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Takokak, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.190.153

Whois 140.213.190.153

IP Abuse Reports for 140.213.190.153:

This IP address has been reported a total of 33 times from 7 distinct sources. 140.213.190.153 was first reported on October 15th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-23 06:57:37 (4 days ago)	[Fri Oct 23 13:57:37.327973 2026] [security2:error] [pid 1073199:tid 139900422706880] [client 140.21 ... show more [Fri Oct 23 13:57:37.327973 2026] [security2:error] [pid 1073199:tid 139900422706880] [client 140.213.190.153:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PHP" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: PHP found within REQUEST_HEADERS:user-agent: php2shell-check/1.0 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "atsFYdPZ4vTiugz_v1t7IwAAABQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1073246] [yE3YfrzXR3w] [atsFYdPZ4vTiugz_v1t7IwAAABQ] keep_alive=[0] [2026-10-23 13:57:37.327980] [R:atsFYdPZ4vTiugz_v1t7IwAAABQ] UA:'php2shell-check/1.0' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip, br ... show less	Email Spam Hacking
🇮🇩 cybersecbengkalis	2026-10-23 02:04:00 (4 days ago)	[23/Oct/2026:08:06:19 +0700] "GET / HTTP/1.1" 503 1769 "-" "php2shell-check/1.0"	Exploited Host Web App Attack Hacking
🇮🇩 hermawan	2026-10-23 01:35:02 (4 days ago)	[Fri Oct 23 08:35:02.617758 2026] [security2:error] [pid 822567:tid 139900171056832] [client 140.213 ... show more [Fri Oct 23 08:35:02.617758 2026] [security2:error] [pid 822567:tid 139900171056832] [client 140.213.190.153:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PHP" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: PHP found within REQUEST_HEADERS:user-agent: php2shell-check/1.0 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "atq5xos6c4xTw7G1Z1ibxAAAANY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[822659] [Z982/Tces3w] [atq5xos6c4xTw7G1Z1ibxAAAANY] keep_alive=[0] [2026-10-23 08:35:02.617766] [R:atq5xos6c4xTw7G1Z1ibxAAAANY] UA:'php2shell-check/1.0' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip, br ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-07-27 14:13:31 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-06-26 09:00:56 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-26 08:00:54 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.9/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-26 07:00:53 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 4.2/10 (MEDIUM). Confide ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 4.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-26 04:01:02 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 4/10 (MEDIUM). Confidenc ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-25 15:00:53 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.5/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-25 14:00:53 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.6/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-25 13:00:52 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.7/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-24 15:00:53 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-24 14:00:09 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 0/10 (INFORMATIONAL). Re ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-08 13:00:57 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.7/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-08 10:00:54 (4 months ago)	User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence ... show more User login to application from malicious IP 140.213.190.153.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 185.200.116.41

🇬🇧 178.128.168.102

🇺🇸 157.245.92.108

🇲🇲 103.237.114.2

🇨🇳 101.126.153.162

🇩🇪 94.183.174.95

🇩🇪 87.106.47.28

🇪🇸 86.127.235.148

🇬🇧 51.24.186.244

🇳🇱 45.148.10.121

🇸🇬 43.159.62.8

🇸🇬 43.156.138.205

🇺🇸 34.48.244.179

🇺🇸 13.219.99.134

🇰🇷 220.122.115.9

🇨🇳 202.101.144.44

🇧🇷 201.63.223.141

🇧🇪 198.235.24.241

🇩🇪 194.187.176.124

🇳🇱 193.47.62.28