JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.213.190.181

140.213.190.181 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 17%: ?

17%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xl.co.id
Country	🇮🇩 Indonesia
City	Takokak, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.213.190.181

Whois 140.213.190.181

IP Abuse Reports for 140.213.190.181:

This IP address has been reported a total of 14 times from 7 distinct sources. 140.213.190.181 was first reported on January 6th 2021, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-22 18:25:54 (4 days ago)	140.213.190.181 \| Port: 13350 \| DNS: 140.213.190.181 2026-10-23T02:25:53+08:00 Asia/Jakarta \| IPs Sp ... show more 140.213.190.181 \| Port: 13350 \| DNS: 140.213.190.181 2026-10-23T02:25:53+08:00 Asia/Jakarta \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /Sailboat-Beach-Birthday-Themed-Cake?a18113656d3d01d59=SGD&code=SGD \| Ref: - \| Country: ID/Indonesia/+07:00 IP City: Takokak Windows a4ea8c120eefa39b-SIN/Singapore, Singapore 1 hits/0 secs Browser 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 鬼影233	2026-09-24 14:58:27 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇮🇩 hermawan	2026-09-23 06:24:34 (1 month ago)	Captured JA4H: ge11n_63cf1041adb5 \| Log: 140.213.190.181 - - [23/Sep/2026:13:05:54 +0700] "GET /inde ... show more Captured JA4H: ge11n_63cf1041adb5 \| Log: 140.213.190.181 - - [23/Sep/2026:13:05:54 +0700] "GET /index.php/profil/arsip-artikel?catid=476&id=1130%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-12-september-2016&start=70 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇺🇸 鬼影233	2026-09-21 12:14:32 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-19 13:03:34 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-17 05:57:07 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-18 02:27:33 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-26 20:21:33 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-15 19:40:14 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-05-27 20:00:39 (4 months ago)	User access to sensitive menu during non-business hours, Late night login (22:00-05:30) - High risk ... show more User access to sensitive menu during non-business hours, Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-27 18:00:11 (4 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-27 16:00:47 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇦🇹 Bloodhunter4rc	2021-02-22 23:42:11 (5 years ago)	SSH Honeypot -> SSH Bruteforce / Login	Brute-Force SSH
Anonymous	2021-01-06 09:08:47 (5 years ago)	Spam	Email Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.25

🇮🇳 123.253.162.253

🇺🇿 94.158.58.246

🇳🇱 77.67.26.186

🇧🇪 35.241.178.123

🇧🇪 35.205.122.187

🇨🇳 27.99.131.217

🇰🇷 218.155.74.4

🇧🇷 201.17.133.138

🇲🇽 189.167.237.128

🇦🇷 181.1.165.84

🇳🇱 178.62.247.227

🇺🇸 172.84.101.122

🇳🇱 160.119.71.130

🇸🇬 159.223.63.53

🇧🇷 138.36.160.64

🇮🇳 119.18.55.118

🇩🇪 109.160.32.159

🇲🇳 103.14.38.34

🇯🇵 96.126.130.210