JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.140.136.17

13.140.136.17 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3432391.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.140.136.17

Whois 13.140.136.17

IP Abuse Reports for 13.140.136.17:

This IP address has been reported a total of 94 times from 70 distinct sources. 13.140.136.17 was first reported on July 10th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Ivo Vynckier	2026-07-23 10:39:00 (15 hours ago)	13.140.136.17 - - [23/Jul/2026:01:43:39 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 299 "-" "Mozilla/5. ... show more 13.140.136.17 - - [23/Jul/2026:01:43:39 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.140.136.17 - - [23/Jul/2026:01:43:54 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.140.136.17 - - [23/Jul/2026:01:44:00 +0200] "GET /wp-admin/includes/ HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-07-23 09:21:53 (17 hours ago)	FortiWeb WAF: 78 attacks detected. Threat Score: 50800. Types: Client Management(39), Block IP List( ... show more FortiWeb WAF: 78 attacks detected. Threat Score: 50800. Types: Client Management(39), Block IP List(39). Origin: France. show less	Web App Attack
🇬🇧 consul.to	2026-07-23 08:25:45 (18 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 Yosi	2026-07-23 02:27:13 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇮🇩 soc-yk	2026-07-22 21:30:11 (1 day ago)	Type: suspicious_network_activity Risk: 100 Events: 45 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 100 Events: 45 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Threat escalation behavior observed show less	Port Scan Hacking
Anonymous	2026-07-22 17:24:35 (1 day ago)	PSCSERV WPSCAN 13.140.136.17	Bad Web Bot Web App Attack
Anonymous	2026-07-22 09:17:51 (1 day ago)	FortiWeb WAF: 330 attacks detected. Threat Score: 55200. Types: Client Management(165), Block IP Lis ... show more FortiWeb WAF: 330 attacks detected. Threat Score: 55200. Types: Client Management(165), Block IP List(165). Origin: France. show less	Web App Attack
🇩🇪 LRob	2026-07-22 08:31:59 (1 day ago)	CrowdSec: crowdsecurity/http-admin-interface-probing \| req: /wp-admin/css/ \| 3 distinct paths \| UA: ... show more CrowdSec: crowdsecurity/http-admin-interface-probing \| req: /wp-admin/css/ \| 3 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Hacking
🇫🇷 masterguru	2026-07-22 07:49:19 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.140.136.17 (DE/Germany/vmi3432391. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.140.136.17 (DE/Germany/vmi3432391.contaboserver.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇦 URAN Publishing Service	2026-07-22 04:48:11 (1 day ago)	13.140.136.17 - - [22/Jul/2026:07:48:08 +0300] "GET /wp-admin/css/ HTTP/1.1" 404 762 "-" "Mozilla/5. ... show more 13.140.136.17 - - [22/Jul/2026:07:48:08 +0300] "GET /wp-admin/css/ HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.140.136.17 - - [22/Jul/2026:07:48:10 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 Catalin Negru	2026-07-21 20:31:46 (2 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇨🇦 polycoda	2026-07-21 17:53:47 (2 days ago)	AutoBlock: 📂 Directory Listings (Decay-Based)	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-21 15:54:51 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.140.136.17 (FR/France/vmi3432391 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.140.136.17 (FR/France/vmi3432391.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack
🇬🇧 consul.to	2026-07-21 09:13:06 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇪 vaia.cloud	2026-07-21 08:00:05 (2 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.74

🇬🇧 45.133.173.54

🇨🇳 220.181.108.105

🇧🇷 205.210.31.173

🇺🇸 159.203.107.64

🇮🇳 124.253.131.122

🇫🇷 91.231.89.173

🇳🇱 91.92.47.123

🇳🇱 89.21.67.182

🇨🇦 85.217.149.3

🇩🇪 69.5.169.207

🇺🇸 66.78.40.90

🇳🇱 45.156.87.93

🇷🇺 37.77.150.241

🇭🇳 2620:171:3f:f001:9999::240

🇧🇪 207.175.50.104

🇩🇪 207.154.212.47

🇺🇸 195.184.76.28

🇩🇪 193.27.14.243

🇺🇸 135.237.122.184