JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.222.8.212

13.222.8.212 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-222-8-212.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.222.8.212

Whois 13.222.8.212

IP Abuse Reports for 13.222.8.212:

This IP address has been reported a total of 58 times from 43 distinct sources. 13.222.8.212 was first reported on September 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-21 20:32:54 (1 day ago)	2026-09-21 15:35:39,785 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 13.222.8.212 .. ... show more 2026-09-21 15:35:39,785 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 13.222.8.212 ... show less	Bad Web Bot
🇩🇪 klaus_ph	2026-09-21 17:13:35 (1 day ago)	2026-09-21 15:29:56,393 fail2ban.actions [1549]: NOTICE [ipblocklist] Ban 13.222.8.212 ...	Bad Web Bot
🇮🇱 spd.co.il	2026-09-18 21:02:45 (4 days ago)	Web application attack detected	Hacking Web App Attack
🇮🇳 evicky2002	2026-09-17 06:00:05 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇪 voormedia	2026-09-17 02:56:09 (6 days ago)	Accessed trap at '/.bash_profile'	Web App Attack
🇩🇪 palla89	2026-09-17 02:49:16 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 13.222.8.212 (US/United States/ec2-13-2 ... show more (mod_security) mod_security triggered on hostname [redacted] 13.222.8.212 (US/United States/ec2-13-222-8-212.compute-1.amazonaws.com) show less	SQL Injection
🇯🇵 tttomomi	2026-09-17 02:15:13 (6 days ago)	Repeated probing for credential and configuration files, and for known webshell and remote-code-exec ... show more Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.ssh/id_rsa, /.vscode/launch.json, /.ssh/authorized_keys. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 02:14:55 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 13.222.8.212 (ec2-13-222-8-212.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 13.222.8.212 (ec2-13-222-8-212.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:14:51.262658 2026] [security2:error] [pid 16743:tid 16743] [client 13.222.8.212:55846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|namisushionline.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "namisushionline.com"] [uri "/rclone.conf"] [unique_id "aqtNG4mUgjMOT7s96QtRigAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-09-17 01:01:40 (6 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇦 Mediashaker	2026-09-17 00:44:52 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.222.8.212 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.222.8.212 (US/United States/ec2-13-222-8-212.compute-1.amazonaws.com) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 00:41:54 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 13.222.8.212 (ec2-13-222-8-212.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 13.222.8.212 (ec2-13-222-8-212.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:41:48.812642 2026] [security2:error] [pid 6825:tid 6825] [client 13.222.8.212:44548] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|littlepeopledelivery.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "littlepeopledelivery.com"] [uri "/z9x8c7v6b5-debug-trigger-littlepeopledelivery.com"] [unique_id "aqs3TOLqK-n2aqnaUULafAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 [email protected]	2026-09-17 00:30:09 (6 days ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-09-17T00:30:09Z	Brute-Force
🇺🇸 [email protected]	2026-09-17 00:14:08 (6 days ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-09-17T00:14:08Z	Brute-Force
🇺🇸 helios.live	2026-09-17 00:03:19 (6 days ago)	2026/09/17 00:03:13 [error] 1091515#1091515: 3446270 access forbidden by rule, client: 13.222.8.212 ... show more 2026/09/17 00:03:13 [error] 1091515#1091515: 3446270 access forbidden by rule, client: 13.222.8.212, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/09/17 00:03:14 [error] 1091515#1091515: 3446398 access forbidden by rule, client: 13.222.8.212, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com" 2026/09/17 00:03:15 [error] 1091515#1091515: 3446277 access forbidden by rule, client: 13.222.8.212, server: kocerroxy.com, request: "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1", host: "kocerroxy.com" 2026/09/17 00:03:18 [error] 1091515#1091515: 3446422 access forbidden by rule, client: 13.222.8.212, server: kocerroxy.com, request: "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1", host: "kocerroxy.com" 2026/09/17 00:03:18 [error] 1091515#1091515: 3446277 access forbidden by rule, client: 13.222.8.212, server: kocerroxy.com, request: "GET /@fs/home/ubuntu/.aw ... show less	Web App Attack
🇺🇸 [email protected]	2026-09-16 23:59:03 (6 days ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-09-16T23:59:03Z	Brute-Force

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.118.173.234

🇧🇴 190.129.122.185

🇰🇷 183.111.227.44

🇺🇸 165.227.84.14

🇮🇳 163.223.244.3

🇮🇩 163.7.8.79

🇮🇳 157.245.105.107

🇯🇵 126.69.103.63

🇵🇭 120.29.78.181

🇻🇳 103.216.119.46

🇺🇸 35.185.1.152

🇫🇷 185.41.28.133

🇺🇸 170.106.142.136

🇩🇪 165.245.220.93

🇿🇦 165.16.184.33

🇮🇳 136.232.11.10

🇺🇸 66.132.172.250

🇺🇸 66.132.172.102

🇦🇷 216.244.207.91

🇺🇸 208.75.123.235