This IP address has been reported a total of
65
times from
42 distinct
sources.
13.140.137.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 13.140.137.148 (US/United States/vmi3350450.contaboserver.net): 5 in th ...
show more(sshd) Failed SSH login from 13.140.137.148 (US/United States/vmi3350450.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 18 16:59:14 da057 sshd[667500]: Invalid user erpuser from 13.140.137.148 port 44206
Jul 18 17:05:35 da057 sshd[677667]: Invalid user portal from 13.140.137.148 port 49520
Jul 18 17:08:45 da057 sshd[680484]: Invalid user rke from 13.140.137.148 port 46308
Jul 18 17:11:52 da057 sshd[684500]: Invalid user web from 13.140.137.148 port 45560
Jul 18 17:15:01 da057 sshd[688018]: Invalid user deploy from 13.140.137.148 port 35630
show less
2026-07-18T14:57:45.753180+00:00 de-fra2-nat641 sshd[1094003]: Invalid user erpuser from 13.140.137. ...
show more2026-07-18T14:57:45.753180+00:00 de-fra2-nat641 sshd[1094003]: Invalid user erpuser from 13.140.137.148 port 55992
2026-07-18T15:04:04.612694+00:00 de-fra2-nat641 sshd[1094312]: Invalid user portal from 13.140.137.148 port 56734
2026-07-18T15:07:14.060444+00:00 de-fra2-nat641 sshd[1094337]: Invalid user rke from 13.140.137.148 port 49306
...
show less
2026-07-18T16:58:43.538053+02:00 gw-de20-01.guestgw.net sshd[466719]: Invalid user erpuser from 13.1 ...
show more2026-07-18T16:58:43.538053+02:00 gw-de20-01.guestgw.net sshd[466719]: Invalid user erpuser from 13.140.137.148 port 36858
2026-07-18T16:58:43.642158+02:00 gw-de20-01.guestgw.net sshd[466719]: Disconnected from invalid user erpuser 13.140.137.148 port 36858 [preauth]
2026-07-18T17:01:54.442293+02:00 gw-de20-01.guestgw.net sshd[467751]: Disconnected from authenticating user root 13.140.137.148 port 38942 [preauth]
2026-07-18T17:05:08.370224+02:00 gw-de20-01.guestgw.net sshd[468753]: Invalid user portal from 13.140.137.148 port 40338
2026-07-18T17:05:08.438064+02:00 gw-de20-01.guestgw.net sshd[468753]: Disconnected from invalid user portal 13.140.137.148 port 40338 [preauth]
show less
Jul 18 14:52:56 mail sshd[564533]: Invalid user zyx from 13.140.137.148 port 39196
Jul 18 14:52:56 m ...
show moreJul 18 14:52:56 mail sshd[564533]: Invalid user zyx from 13.140.137.148 port 39196
Jul 18 14:52:56 mail sshd[564533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.137.148
Jul 18 14:52:58 mail sshd[564533]: Failed password for invalid user zyx from 13.140.137.148 port 39196 ssh2
...
show less
Jul 18 14:37:01 mail sshd[560890]: Invalid user admin from 13.140.137.148 port 44334
Jul 18 14:37:01 ...
show moreJul 18 14:37:01 mail sshd[560890]: Invalid user admin from 13.140.137.148 port 44334
Jul 18 14:37:01 mail sshd[560890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.137.148
Jul 18 14:37:03 mail sshd[560890]: Failed password for invalid user admin from 13.140.137.148 port 44334 ssh2
...
show less
Jul 18 14:17:58 mail sshd[556578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJul 18 14:17:58 mail sshd[556578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.137.148
Jul 18 14:18:00 mail sshd[556578]: Failed password for invalid user yousef from 13.140.137.148 port 54302 ssh2
Jul 18 14:21:07 mail sshd[557404]: Invalid user mailuser from 13.140.137.148 port 36424
...
show less
Jul 18 15:03:33 HydrAttack-TW-HL sshd[1290074]: Invalid user testserver from 13.140.137.148 port 533 ...
show moreJul 18 15:03:33 HydrAttack-TW-HL sshd[1290074]: Invalid user testserver from 13.140.137.148 port 53386
Jul 18 15:07:36 HydrAttack-TW-HL sshd[1290224]: Invalid user ts from 13.140.137.148 port 38032
Jul 18 15:10:43 HydrAttack-TW-HL sshd[1290449]: Invalid user ashish from 13.140.137.148 port 33408
Jul 18 15:16:58 HydrAttack-TW-HL sshd[1290682]: Invalid user alma from 13.140.137.148 port 51154
Jul 18 15:20:06 HydrAttack-TW-HL sshd[1290846]: Invalid user yousef from 13.140.137.148 port 54224
...
show less
Jul 18 13:58:28 mail sshd[552223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJul 18 13:58:28 mail sshd[552223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.137.148
Jul 18 13:58:30 mail sshd[552223]: Failed password for invalid user testserver from 13.140.137.148 port 38082 ssh2
Jul 18 14:05:34 mail sshd[553851]: Invalid user ts from 13.140.137.148 port 54330
...
show less
Brute-Force
SSH
Anonymous
2026-07-18T13:37:51.118994+02:00 hvs sshd-session[149036]: Disconnected from authenticating user roo ...
show more2026-07-18T13:37:51.118994+02:00 hvs sshd-session[149036]: Disconnected from authenticating user root 13.140.137.148 port 50944 [preauth]
2026-07-18T13:40:59.700841+02:00 hvs sshd-session[149062]: Disconnected from authenticating user root 13.140.137.148 port 50554 [preauth]
2026-07-18T13:44:16.617977+02:00 hvs sshd-session[149091]: Disconnected from authenticating user root 13.140.137.148 port 60744 [preauth]
2026-07-18T13:47:19.603366+02:00 hvs sshd-session[149116]: Invalid user test from 13.140.137.148 port 37206
2026-07-18T13:47:19.618759+02:00 hvs sshd-session[149116]: Disconnected from invalid user test 13.140.137.148 port 37206 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-07-18T13:00:03.239677+02:00 hvs sshd-session[148593]: Disconnected from invalid user minecraft ...
show more2026-07-18T13:00:03.239677+02:00 hvs sshd-session[148593]: Disconnected from invalid user minecraft 13.140.137.148 port 58042 [preauth]
2026-07-18T13:15:47.420633+02:00 hvs sshd-session[148844]: Disconnected from authenticating user root 13.140.137.148 port 46618 [preauth]
2026-07-18T13:18:57.449767+02:00 hvs sshd-session[148873]: Disconnected from authenticating user root 13.140.137.148 port 39898 [preauth]
2026-07-18T13:22:05.920130+02:00 hvs sshd-session[148900]: Invalid user git from 13.140.137.148 port 45154
2026-07-18T13:22:05.951799+02:00 hvs sshd-session[148900]: Disconnected from invalid user git 13.140.137.148 port 45154 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-07-18T12:53:47.503782+02:00 hvs sshd-session[148533]: Invalid user steam from 13.140.137.148 po ...
show more2026-07-18T12:53:47.503782+02:00 hvs sshd-session[148533]: Invalid user steam from 13.140.137.148 port 33940
2026-07-18T12:53:47.526567+02:00 hvs sshd-session[148533]: Disconnected from invalid user steam 13.140.137.148 port 33940 [preauth]
2026-07-18T12:56:53.860448+02:00 hvs sshd-session[148561]: Invalid user runner from 13.140.137.148 port 38574
2026-07-18T12:56:53.912826+02:00 hvs sshd-session[148561]: Disconnected from invalid user runner 13.140.137.148 port 38574 [preauth]
2026-07-18T13:00:03.223618+02:00 hvs sshd-session[148593]: Invalid user minecraft from 13.140.137.148 port 58042
...
show less
Brute-Force
SSH
Showing 1 to
15
of 65 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩