JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.222.159.238

13.222.159.238 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 44%: ?

44%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-222-159-238.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.222.159.238

Whois 13.222.159.238

IP Abuse Reports for 13.222.159.238:

This IP address has been reported a total of 10 times from 6 distinct sources. 13.222.159.238 was first reported on July 24th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-28 21:59:07 (13 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-27. show less	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-07-28 01:03:31 (1 day ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-131) show less	Hacking
🇳🇱 homeshowdomain.nl	2026-07-27 22:02:33 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-27 12:28:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:28:27.782009 2026] [security2:error] [pid 22453:tid 22484] [client 13.222.159.238:57516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "htpsocal.com"] [uri "/.git/config"] [unique_id "amdO60Ejgm3rI3O20g-w-QAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:25:09 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:25:01.539613 2026] [security2:error] [pid 83379:tid 83379] [client 13.222.159.238:60754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "htlc-ch.org.dhsgrad.net"] [uri "/.git/config"] [unique_id "amdADSF8MbufrEYQ34FGjgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 02:54:59 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 VHosting	2026-07-25 11:35:03 (4 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-25 11:05:24 (4 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 16:51:40 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 12:51:36.057789 2026] [security2:error] [pid 607079:tid 607079] [client 13.222.159.238:54708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secuencia.com"] [uri "/.git/config"] [unique_id "amOYGHVzYXtRB0pRS8g4twAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:47:32 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 13.222.159.238 (ec2-13-222-159-238.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:47:25.577785 2026] [security2:error] [pid 3156603:tid 3156603] [client 13.222.159.238:37738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sharonmauldin.com"] [uri "/.git/config"] [unique_id "amLuXZEwp8SwZ0g9ejG7fQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.154

🇲🇽 201.149.53.243

🇹🇼 198.235.24.85

🇱🇹 158.173.79.250

🇺🇸 147.185.132.249

🇩🇪 91.92.43.109

🇧🇬 78.128.112.146

🇯🇵 20.243.208.191

🇷🇴 193.32.162.15

🇩🇪 167.94.146.35

🇺🇸 162.243.147.237

🇱🇾 154.127.69.15

🇧🇷 148.222.206.96

🇸🇬 145.223.140.106

🇨🇦 129.222.247.229

🇮🇳 119.18.52.5

🇫🇷 91.196.152.220

🇺🇸 65.49.1.217

🇫🇮 62.238.54.9

🇳🇱 45.198.224.26