AbuseIPDB » 140.213.4.197
140.213.4.197
This IP was reported 6 times. Confidence of
Abuse
is 11% : ?
ISP
PT XLSMART Telecom Sejahtera Tbk
Usage Type
Mobile ISP
ASN
AS24203
Domain Name
xl.co.id
Country
🇮🇩
Indonesia
City
Jakarta, Jakarta
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 140.213.4.197 :
This IP address has been reported a total of
6
times from
3 distinct
sources.
140.213.4.197 was first reported on
April 13th 2023 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
sockominfo
2026-09-13 20:00:29
(2 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
🇮🇩
sockominfo
2026-09-13 19:00:53
(2 days ago)
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Conf ...
show more
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 81%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇩🇪
crnpekgoz
2026-08-18 03:10:16
(4 weeks ago)
[PortScan] Risk=100 ASN=24203 (portscan) Port=445 HoneypotTrap=true | Reported by WardenIPS: https:/ ...
show more
[PortScan] Risk=100 ASN=24203 (portscan) Port=445 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
show less
Port Scan
🇮🇩
sockominfo
2026-08-13 18:00:53
(1 month ago)
User access to sensitive menu during non-business hours. Threat Score: 5.1/10 (MEDIUM). Confidence: ...
show more
User access to sensitive menu during non-business hours. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-08-13 17:00:58
(1 month ago)
User access to sensitive menu during non-business hours. Threat Score: 5.2/10 (MEDIUM). Confidence: ...
show more
User access to sensitive menu during non-business hours. Threat Score: 5.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇨🇭
abdullah
2023-04-13 03:06:00
(3 years ago)
Unauthorized connection attempt detected from IP address 140.213.4.197 to port 445 (maple)
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: