JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.140.155.136

13.140.155.136 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3358846.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.140.155.136

Whois 13.140.155.136

IP Abuse Reports for 13.140.155.136:

This IP address has been reported a total of 27 times from 21 distinct sources. 13.140.155.136 was first reported on June 19th 2026, and the most recent report was 40 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 PENJAGA.AUM	2026-06-19 17:25:58 (40 minutes ago)	13.140.155.136 - Attack: ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	Web App Attack SQL Injection Spoofing
Anonymous	2026-06-19 17:21:06 (45 minutes ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇮🇪 AutosOnShow	2026-06-19 16:48:05 (1 hour ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-06-19 16:47:34.570 \|	Web App Attack
🇮🇪 AutosOnShow	2026-06-19 16:32:04 (1 hour ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-06-19 16:31:13.540 \|	Web App Attack
🇺🇸 MPL	2026-06-19 15:59:55 (2 hours ago)	tcp/2222 (2 or more attempts)	Port Scan
🇷🇺 OK	2026-06-19 15:38:23 (2 hours ago)	HTTP/HTTPS	Hacking Web App Attack
🇩🇪 paissangroup	2026-06-19 15:28:32 (2 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇩 zam	2026-06-19 15:08:43 (2 hours ago)	13.140.155.136 - - [19/Jun/2026:15:08:39 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 13.140.155.136 - - [19/Jun/2026:15:08:39 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 236 show less	Web App Attack
🇨🇦 Dmitry Shesterin	2026-06-19 14:54:28 (3 hours ago)	Jun 19 10:53:54 pvr sshd[762602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 19 10:53:54 pvr sshd[762602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.155.136 Jun 19 10:53:56 pvr sshd[762602]: Failed password for invalid user admin from 13.140.155.136 port 35774 ssh2 Jun 19 10:54:28 pvr sshd[762631]: Invalid user orangepi from 13.140.155.136 port 48680 ... show less	Brute-Force SSH
🇫🇷 zulzeen	2026-06-19 14:32:16 (3 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SSH Attack)	SSH Brute-Force
🇺🇸 TPI-Abuse	2026-06-19 13:53:36 (4 hours ago)	(mod_security) mod_security (id:218420) triggered by 13.140.155.136 (vmi3358846.contaboserver.net): ... show more (mod_security) mod_security (id:218420) triggered by 13.140.155.136 (vmi3358846.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:53:32.463209 2026] [security2:error] [pid 17447:tid 17447] [client 13.140.155.136:49802] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.71:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.71"] [uri "/hello.world"] [unique_id "ajVJ3Kty7HYkros9-D_L-gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-06-19 13:45:02 (4 hours ago)	ModSecurity rule 949110 triggered on cumberland. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 MPL	2026-06-19 13:44:17 (4 hours ago)	tcp/2222 (4 or more attempts)	Port Scan
🇳🇴 jad-abuse	2026-06-19 12:44:01 (5 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: cgi_probe ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: cgi_probe, php_rce, phpunit_rce, think_rce, path_traversal, docker_api. Observed by 1 sensor(s); 46 hits. show less	Hacking Web App Attack
🇩🇪 mxpgmbh	2026-06-19 11:18:02 (6 hours ago)	2026-06-19T13:17:24.227099+02:00 ** sshd-session[17834]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-19T13:17:24.227099+02:00 sshd-session[17834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.155.136 user=root 2026-06-19T13:17:26.510453+02:00 sshd-session[17834]: Failed password for root from 13.140.155.136 port 43884 ssh2 2026-06-19T13:17:59.444596+02:00 sshd-session[17845]: Invalid user from 13.140.155.136 port 52248 2026-06-19T13:17:59.446291+02:00 sshd-session[17845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.155.136 2026-06-19T13:18:01.442902+02:00 sshd-session[17845]: Failed password for invalid user ** from 13.140.155.136 port 52248 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 185.94.33.143

🇷🇴 80.94.92.178

🇩🇴 190.167.237.191

🇧🇷 190.115.84.25

🇫🇮 185.94.33.194

🇨🇴 179.1.127.235

🇻🇳 171.244.141.86

🇺🇸 162.216.150.236

🇩🇪 151.243.11.248

🇺🇸 140.235.170.23

🇺🇸 140.235.168.59

🇺🇸 140.235.0.23

🇨🇳 113.99.188.221

🇸🇬 82.38.180.254

🇺🇸 74.7.243.48

🇺🇸 74.7.242.0

🇺🇸 66.132.186.222

🇺🇸 54.237.137.96

🇨🇳 49.233.45.47

🇺🇸 47.77.180.67