13.222.186.22
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-13-222-186-22.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
120 from
93 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 19).
|
Hacking Web App Attack | |
| 🇺🇸 ISPLtd |
Nov 15 08:29:37 13.222.186.22 TCP SPT=28498 DPT=21 SYN
Nov 15 08:29:39 13.222.186.22 TCP SPT=28498 DPT=21 SYN
Nov 15 08:29:41 13.222.186.22 TCP SPT=28498 DPT=21 SYN
...
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 1215 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 8000.
|
Port Scan Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-11-15T07:39Z).
|
Port Scan SSH | |
| Anonymous |
CrowdSec ban: crowdsecurity/ssh-refused-conn
|
Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 7 hits on ports [1245, 8000] (automated)
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 3232 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇩🇪 Ilop |
[v7-22] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443, src_ip=13.222.186.22
|
Port Scan Hacking | |
| 🇹🇷 SeczarSecureOps |
Seczar SecureOps — SSH Brute Force (22 events) — quarantined 43200m
|
SSH Brute-Force | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=3232
|
Port Scan Hacking | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| Anonymous |
|
Port Scan Brute-Force SSH | |
| 🇨🇳 yiyan |
Web probe targeting 'GET /robots.txt'. Log: 13.222.186.22 - - [14/Nov/2026:20:02:16 +0800] "GET /robots.txt HTTP/1.1" 200 733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0
|
Hacking Bad Web Bot | |
| 🇸🇰 EVISION |
Automatic report from EV firewall log.
https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: fSU1PJjQ5hvPiuWElMk6ST5MMOiZkER1
|
Port Scan Hacking Brute-Force | |
| 🇰🇷 ian ian |
Unsolicited TCP SYN to closed port(s) 9200 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-14T10:00:37Z UTC, blocked by firewall.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown