This IP address has been reported a total of
18
times from
18 distinct
sources.
13.140.145.206 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/pf-geofence-high.
Hacking
Anonymous
(sshd) Failed SSH login from 13.140.145.206 (DE/Germany/vmi3354917.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 13.140.145.206 (DE/Germany/vmi3354917.contaboserver.net): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-06-21T02:04:51.497351+02:00 web28.sier.online sshd[3112080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.145.206 user=root
2026-06-21T02:04:53.604632+02:00 web28.sier.online sshd[3112080]: Failed password for root from 13.140.145.206 port 59012 ssh2
2026-06-21T02:05:02.690401+02:00 web28.sier.online sshd[3112080]: Failed password for root from 13.140.145.206 port 59012 ssh2
2026-06-21T02:05:04.998696+02:00 web28.sier.online sshd[3112166]: Invalid user test from 13.140.145.206 port 56772
2026-06-21T02:05:05.004910+02:00 web28.sier.online sshd[3112166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.145.206
show less
Port Scan
Anonymous
2026-06-20T15:44:55.379632+03:30 digitalogic sshd-session[3619309]: Failed password for root from 13 ...
show more2026-06-20T15:44:55.379632+03:30 digitalogic sshd-session[3619309]: Failed password for root from 13.140.145.206 port 47670 ssh2
2026-06-20T15:44:58.693236+03:30 digitalogic sshd-session[3619309]: Failed password for root from 13.140.145.206 port 47670 ssh2
2026-06-20T15:45:00.510893+03:30 digitalogic sshd-session[3619309]: Failed password for root from 13.140.145.206 port 47670 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-20T13:28:44.820120 www.yerkanian.com sshd-session[387116]: Failed password for root from 13. ...
show more2026-06-20T13:28:44.820120 www.yerkanian.com sshd-session[387116]: Failed password for root from 13.140.145.206 port 47908 ssh2
2026-06-20T13:28:48.855895 www.yerkanian.com sshd-session[387116]: Failed password for root from 13.140.145.206 port 47908 ssh2
2026-06-20T13:28:52.230627 www.yerkanian.com sshd-session[387116]: Failed password for root from 13.140.145.206 port 47908 ssh2
2026-06-20T13:28:54.093374 www.yerkanian.com sshd-session[387116]: Failed password for root from 13.140.145.206 port 47908 ssh2
2026-06-20T13:28:55.951830 www.yerkanian.com sshd-session[387116]: Failed password for root from 13.140.145.206 port 47908 ssh2
2026-06-20T13:28:56.144811 www.yerkanian.com sshd-session[387116]: Disconnecting authenticating user root 13.140.145.206 port 47908: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-06-20T13:28:56.298263 www.yerkanian.com sshd-session[387124]: Invalid user test from 13.140.145.206 port 49954
...
show less
Brute-Force
SSH
Anonymous
Jun 14 02:13:49 rotator sshd\[20296\]: Failed password for root from 13.140.145.206 port 60398 ssh2J ...
show moreJun 14 02:13:49 rotator sshd\[20296\]: Failed password for root from 13.140.145.206 port 60398 ssh2Jun 14 02:13:51 rotator sshd\[20296\]: Failed password for root from 13.140.145.206 port 60398 ssh2Jun 14 02:13:53 rotator sshd\[20296\]: Failed password for root from 13.140.145.206 port 60398 ssh2Jun 14 02:13:55 rotator sshd\[20296\]: Failed password for root from 13.140.145.206 port 60398 ssh2
...
show less
Blocked by UFW (TCP on 22)
Source port: 6233
TTL: 105
Packet length: 40
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 6233
TTL: 105
Packet length: 40
TOS: 0x08
This report (for 13.140.145.206) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-13T13:54:50.280922+02:00 vmi3299174 sshd[2387780]: Failed password for root from 13.140.145. ...
show more2026-06-13T13:54:50.280922+02:00 vmi3299174 sshd[2387780]: Failed password for root from 13.140.145.206 port 43744 ssh2
2026-06-13T13:55:02.945934+02:00 vmi3299174 sshd[2387780]: Failed password for root from 13.140.145.206 port 43744 ssh2
2026-06-13T13:55:04.284782+02:00 vmi3299174 sshd[2387780]: Disconnecting authenticating user root 13.140.145.206 port 43744: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
2026-06-13T02:08:06.111330+02:00 fangorn sshd[1138237]: Failed password for root from 13.140.145.206 ...
show more2026-06-13T02:08:06.111330+02:00 fangorn sshd[1138237]: Failed password for root from 13.140.145.206 port 41160 ssh2
2026-06-13T02:08:09.303851+02:00 fangorn sshd[1138237]: Failed password for root from 13.140.145.206 port 41160 ssh2
2026-06-13T02:08:11.644438+02:00 fangorn sshd[1138237]: Failed password for root from 13.140.145.206 port 41160 ssh2
...
show less
2026-06-12T18:34:52.287119+02:00 pokevador sshd[780653]: Failed password for root from 13.140.145.20 ...
show more2026-06-12T18:34:52.287119+02:00 pokevador sshd[780653]: Failed password for root from 13.140.145.206 port 53686 ssh2
2026-06-12T18:35:03.016266+02:00 pokevador sshd[780653]: Failed password for root from 13.140.145.206 port 53686 ssh2
2026-06-12T18:35:03.965458+02:00 pokevador sshd[780653]: Disconnecting authenticating user root 13.140.145.206 port 53686: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
Unauthorized attempt on (TCP on port 2222).
Source port: 7883
TTL: 115
Packet length: 40
Timestamp: ...
show moreUnauthorized attempt on (TCP on port 2222).
Source port: 7883
TTL: 115
Packet length: 40
Timestamp: 2026-06-11 09:33:41
show less
Port Scan
Showing 1 to
15
of 18 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ