JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.140.174.212

13.140.174.212 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3367338.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.140.174.212

Whois 13.140.174.212

IP Abuse Reports for 13.140.174.212:

This IP address has been reported a total of 62 times from 49 distinct sources. 13.140.174.212 was first reported on June 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-01 03:12:12 (1 day ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 13.140.174.212 - - [29/Jun/2026:04:14:17 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 13.140.174.212 - - [29/Jun/2026:04:14:17 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-06-30 05:04:52 (2 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇫🇷 service Informatique	2026-06-30 04:00:37 (2 days ago)	POST /hello.world	Web App Attack
Anonymous	2026-06-30 00:10:37 (2 days ago)	eval-stdin.php	Hacking Brute-Force Web App Attack
🇦🇹 urnilxfgbez	2026-06-29 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 mxpgmbh	2026-06-29 14:08:11 (3 days ago)	2026-06-29T16:07:38.762876+02:00 ** sshd-session[20168]: Failed password for invalid user fro ... show more 2026-06-29T16:07:38.762876+02:00 sshd-session[20168]: Failed password for invalid user from 13.140.174.212 port 59848 ssh2 2026-06-29T16:07:39.414118+02:00 sshd-session[20166]: Invalid user from 13.140.174.212 port 49930 2026-06-29T16:07:39.415539+02:00 sshd-session[20166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.174.212 2026-06-29T16:07:41.230875+02:00 sshd-session[20166]: Failed password for invalid user from 13.140.174.212 port 49930 ssh2 2026-06-29T16:08:10.393420+02:00 sshd-session[21062]: Invalid user ** from 13.140.174.212 port 55954 show less	Brute-Force SSH
🇵🇱 webadmin	2026-06-29 13:37:10 (3 days ago)		Brute-Force SSH
🇳🇱 Jos Moonen	2026-06-29 13:35:29 (3 days ago)	13.140.174.212 - - [29/Jun/2026:15:35:28 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 13.140.174.212 - - [29/Jun/2026:15:35:28 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 3 "-" "libredtail-http" 13.140.174.212 - - [29/Jun/2026:15:35:29 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 200 3 "-" "libredtail-http" ... show less	Web App Attack Brute-Force
🇺🇸 bigscoots.com	2026-06-29 13:17:35 (3 days ago)	(sshd) Failed SSH login from 13.140.174.212 (DE/Germany/vmi3367338.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 13.140.174.212 (DE/Germany/vmi3367338.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 29 08:16:46 10231 sshd[28398]: Invalid user admin from 13.140.174.212 port 54450 Jun 29 08:16:46 10231 sshd[28396]: Invalid user admin from 13.140.174.212 port 43858 Jun 29 08:16:48 10231 sshd[28398]: Failed password for invalid user admin from 13.140.174.212 port 54450 ssh2 Jun 29 08:16:49 10231 sshd[28396]: Failed password for invalid user admin from 13.140.174.212 port 43858 ssh2 Jun 29 08:17:21 10231 sshd[28801]: Invalid user orangepi from 13.140.174.212 port 51076 show less	Brute-Force SSH
🇩🇪 Admins@FBN	2026-06-29 13:09:14 (3 days ago)	FW-PortScan: Traffic Blocked srcport=50388 dstport=2222	Port Scan
🇧🇪 sid3windr	2026-06-29 13:07:14 (3 days ago)	SSH port scan (Tarpitted for 1m50s, wasted 163B)	Port Scan SSH
🇬🇧 myintarweb	2026-06-29 12:52:43 (3 days ago)	13.140.174.212 - - [29/Jun/2026:13:52:42 +0100] 80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 13.140.174.212 - - [29/Jun/2026:13:52:42 +0100] 80 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 1471 "-" "libredtail-http" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-29 12:50:56 (3 days ago)	Blocked by UFW (TCP on 2222) Source port: 57648 TTL: 45 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 57648 TTL: 45 Packet length: 40 TOS: 0x08 This report (for 13.140.174.212) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-06-29 12:50:02 (3 days ago)	Threat.live: Brute Force	Brute-Force
🇱🇹 NotACaptcha	2026-06-29 12:44:35 (3 days ago)	Unauthorised access (Jun 29 15:44) SRC=13.140.174.212 LEN=40 TTL=50 ID=46905 TCP DPT=23 WINDOW=65535 ... show more Unauthorised access (Jun 29 15:44) SRC=13.140.174.212 LEN=40 TTL=50 ID=46905 TCP DPT=23 WINDOW=65535 SYN show less	Port Scan

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.104

🇨🇴 181.174.231.93

🇧🇷 181.174.211.42

🇮🇹 93.92.75.53

🇺🇸 91.230.168.80

🇨🇦 85.217.149.55

🇳🇱 45.156.128.62

🇺🇸 208.84.102.46

🇨🇳 180.212.93.203

🇦🇷 179.64.37.190

🇺🇸 147.185.132.254

🇨🇦 85.217.149.68

🇨🇦 85.217.149.63

🇧🇷 179.63.67.231

🇧🇷 179.48.110.72

🇧🇷 179.42.153.228

🇺🇸 146.75.146.1

🇫🇷 85.217.140.40

🇺🇸 50.139.170.158

🇨🇳 42.5.140.225