JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.140.171.3

13.140.171.3 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 76%: ?

76%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3365591.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.140.171.3

Whois 13.140.171.3

IP Abuse Reports for 13.140.171.3:

This IP address has been reported a total of 17 times from 16 distinct sources. 13.140.171.3 was first reported on June 15th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-06-16 05:15:09 (1 week ago)	1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ... show more 1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 show less	Hacking
🇩🇪 Hugopvigo	2026-06-15 20:36:33 (1 week ago)	"2026-06-15 20:36:33+00:00 13.140.171.3 IP con score alto (87) detectada en el log."	Brute-Force SSH
🇳🇱 Savvii	2026-06-15 18:37:19 (1 week ago)	20 attempts against mh-ssh on pf102939	Brute-Force SSH
🇳🇱 loebas	2026-06-15 18:31:58 (1 week ago)	2026-06-15T20:31:21.124795+02:00 homelab sshd[2953631]: Invalid user orangepi from 13.140.171.3 port ... show more 2026-06-15T20:31:21.124795+02:00 homelab sshd[2953631]: Invalid user orangepi from 13.140.171.3 port 40170 2026-06-15T20:31:21.129176+02:00 homelab sshd[2953631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.171.3 2026-06-15T20:31:23.136495+02:00 homelab sshd[2953631]: Failed password for invalid user orangepi from 13.140.171.3 port 40170 ssh2 2026-06-15T20:31:54.979076+02:00 homelab sshd[2953634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.171.3 user=root 2026-06-15T20:31:57.182684+02:00 homelab sshd[2953634]: Failed password for root from 13.140.171.3 port 38896 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-15 18:18:51 (1 week ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇳🇱 StopAbuse	2026-06-15 18:14:37 (1 week ago)	tcp/443	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-06-15 18:12:02 (1 week ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇺🇸 bigscoots.com	2026-06-15 18:09:58 (1 week ago)	(sshd) Failed SSH login from 13.140.171.3 (DE/Germany/vmi3365591.contaboserver.net): 5 in the last 3 ... show more (sshd) Failed SSH login from 13.140.171.3 (DE/Germany/vmi3365591.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 15 13:08:35 18098 sshd[25500]: Invalid user admin from 13.140.171.3 port 33214 Jun 15 13:08:38 18098 sshd[25500]: Failed password for invalid user admin from 13.140.171.3 port 33214 ssh2 Jun 15 13:09:09 18098 sshd[25594]: Invalid user orangepi from 13.140.171.3 port 51426 Jun 15 13:09:11 18098 sshd[25594]: Failed password for invalid user orangepi from 13.140.171.3 port 51426 ssh2 Jun 15 13:09:42 18098 sshd[25604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.171.3 user=root show less	Brute-Force SSH
🇺🇸 MPL	2026-06-15 18:02:34 (1 week ago)	tcp/2222 (2 or more attempts)	Port Scan
Anonymous	2026-06-15 17:40:30 (1 week ago)	13.140.171.3 - - [15/Jun/2026:19:40:29 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 13.140.171.3 - - [15/Jun/2026:19:40:29 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 3103 "-" "libredtail-http" ... show less	Web App Attack
🇩🇪 tg_de	2026-06-15 17:31:07 (1 week ago)	44 attempts since 15.06.2026 19:31:02 CEST - last search for: /containers/json	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 17:30:46 (1 week ago)	(mod_security) mod_security (id:218420) triggered by 13.140.171.3 (vmi3365591.contaboserver.net): 1 ... show more (mod_security) mod_security (id:218420) triggered by 13.140.171.3 (vmi3365591.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:30:40.421187 2026] [security2:error] [pid 8582:tid 8582] [client 13.140.171.3:47958] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.200:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.200"] [uri "/hello.world"] [unique_id "ajA2wGPzXzuC5tBnGofrEwAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NXTwoThou	2026-06-15 17:07:13 (1 week ago)	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	Web App Attack
🇺🇸 MPL	2026-06-15 17:05:27 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
🇮🇩 Burayot	2026-06-15 16:37:25 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.140.171.3 (FR/France/vmi3365591. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 13.140.171.3 (FR/France/vmi3365591.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 158.69.215.39

🇺🇸 107.175.69.109

🇺🇸 43.135.135.17

🇺🇾 190.135.0.129

🇫🇮 88.214.2.87

🇫🇷 85.217.140.52

🇪🇸 85.208.191.254

🇺🇸 74.128.240.109

🇳🇱 45.148.10.152

🇮🇩 202.46.68.249

🇺🇾 186.55.31.55

🇮🇩 182.3.71.222

🇵🇰 154.192.135.48

🇦🇴 105.168.176.163

🇺🇸 104.12.19.114

🇮🇩 103.187.165.26

🇦🇴 102.213.34.99

🇺🇸 85.208.96.196

🇸🇬 192.161.171.70

🇵🇦 190.140.114.5