JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.140.140.94

13.140.140.94 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3351957.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.140.140.94

Whois 13.140.140.94

IP Abuse Reports for 13.140.140.94:

This IP address has been reported a total of 209 times from 136 distinct sources. 13.140.140.94 was first reported on June 7th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-06-17 06:02:05 (2 days ago)	FortiGate detected IPS attack from IPv4 address 13.140.140.94	Hacking
🇨🇭 SOC [GOLINE SA]	2026-06-16 05:02:36 (3 days ago)	FortiGate detected IPS attack from IPv4 address 13.140.140.94	Hacking
🇨🇭 SOC [GOLINE SA]	2026-06-15 05:02:13 (4 days ago)	FortiGate detected IPS attack from IPv4 address 13.140.140.94	Hacking
Anonymous	2026-06-14 05:16:36 (5 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-06-14 04:02:57 (5 days ago)	FortiGate detected IPS attack from IPv4 address 13.140.140.94	Hacking
🇲🇿 delsio	2026-06-13 12:48:10 (6 days ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=13.140.140.94; destinatio ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=13.140.140.94; destination=160.119.118.96; destination_port=80; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted alert=Live Flow High Score dst=160.119.118.96 port=80 show less	Port Scan
🇪🇸 el-brujo	2026-06-13 12:26:50 (6 days ago)	2026-06-13T14:26:19.494430 ns2.elhacker.net proftpd[1067618]: session[1067618] 0.0.0.0 (13.140.140.9 ... show more 2026-06-13T14:26:19.494430 ns2.elhacker.net proftpd[1067618]: session[1067618] 0.0.0.0 (13.140.140.94[13.140.140.94]): USER admin: no such user found from 13.140.140.94 [13.140.140.94] to ::ffff:192.168.0.3:2222 2026-06-13T14:26:50.142921 ns2.elhacker.net proftpd[1067725]: session[1067725] 0.0.0.0 (13.140.140.94[13.140.140.94]): USER orangepi: no such user found from 13.140.140.94 [13.140.140.94] to ::ffff:192.168.0.3:2222 ... show less	FTP Brute-Force
🇩🇪 Holger	2026-06-13 10:51:57 (6 days ago)	URL probing: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web App Attack
🇺🇸 MPL	2026-06-13 09:28:46 (6 days ago)	tcp/2222 (4 or more attempts)	Port Scan
🇩🇪 mxpgmbh	2026-06-13 08:22:57 (6 days ago)	2026-06-13T10:22:18.446208+02:00 ** sshd-session[55655]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-13T10:22:18.446208+02:00 sshd-session[55655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.140.94 user=root 2026-06-13T10:22:20.234761+02:00 sshd-session[55655]: Failed password for root from 13.140.140.94 port 34212 ssh2 2026-06-13T10:22:54.141044+02:00 sshd-session[56844]: Invalid user from 13.140.140.94 port 37826 2026-06-13T10:22:54.142359+02:00 sshd-session[56844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.140.94 2026-06-13T10:22:55.930815+02:00 sshd-session[56844]: Failed password for invalid user ** from 13.140.140.94 port 37826 ssh2 show less	Brute-Force SSH
🇺🇸 RAP	2026-06-13 06:25:28 (6 days ago)	Probing web services for vulnerabilities	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-06-13 04:02:09 (6 days ago)	FortiGate detected IPS attack from IPv4 address 13.140.140.94	Hacking
🇺🇸 bigscoots.com	2026-06-13 02:47:50 (6 days ago)	(sshd) Failed SSH login from 13.140.140.94 (DE/Germany/vmi3351957.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 13.140.140.94 (DE/Germany/vmi3351957.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 12 21:46:37 15532 sshd[8980]: Invalid user admin from 13.140.140.94 port 42284 Jun 12 21:46:39 15532 sshd[8980]: Failed password for invalid user admin from 13.140.140.94 port 42284 ssh2 Jun 12 21:47:11 15532 sshd[9426]: Invalid user orangepi from 13.140.140.94 port 35844 Jun 12 21:47:13 15532 sshd[9426]: Failed password for invalid user orangepi from 13.140.140.94 port 35844 ssh2 Jun 12 21:47:45 15532 sshd[9638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.140.94 user=root show less	Brute-Force SSH
🇸🇬 serverutama	2026-06-12 23:03:01 (6 days ago)	Nginx scanner: 13.140.140.94 - - [13/Jun/2026:05:27:36 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2 ... show more Nginx scanner: 13.140.140.94 - - [13/Jun/2026:05:27:36 +0700] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" 13.140.140.94 - - [13/Jun/2026:05:27:37 +0700] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	Web App Attack Bad Web Bot
🇨🇿 sajmon0011	2026-06-12 22:18:23 (6 days ago)	13.140.140.94 - - [13/Jun/2026:00:18:22 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 13.140.140.94 - - [13/Jun/2026:00:18:22 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ... show less	Web App Attack

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.146.185.30

🇺🇸 132.243.28.89

🇰🇷 119.209.12.20

🇳🇱 91.92.40.176

🇱🇹 81.30.98.62

🇳🇱 77.83.39.197

🇺🇸 71.71.250.77

🇪🇨 45.184.226.43

🇧🇷 45.170.152.5

🇭🇰 8.217.193.233

🇨🇭 212.35.60.35

🇹🇼 198.235.24.82

🇪🇸 196.196.150.5

🇩🇪 185.249.74.198

🇩🇪 167.94.145.27

🇭🇰 114.111.54.189

🇺🇸 100.29.192.84

🇺🇸 44.12.229.194

🇧🇷 205.210.31.162

🇺🇸 198.98.56.205