13.37.76.130

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
479 reports
136 reporters · latest 2 hours ago
ISP
Amazon Data Services France
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
scan.apcosys.cc
Domain Name
amazon.com
Country
🇫🇷 France
City
Paris, Ile-de-France
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
479 from 136 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 126 🇫🇷 France 102 🇳🇱 Netherlands 62
Most common categories Port Scan 339 Hacking 162 Brute-Force 79 SSH 65 Web App Attack 36
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 withfallback.com
scanning for RTSP devices (IoT cameras probably)
Port Scan IoT Targeted
🇧🇬 MazenHost
1793972326 - 11/06/2026 14:38:46 Host: 13.37.76.130/13.37.76.130 Port: 1080 TCP Blocked ...
Port Scan
🇧🇪 cmbplf
2.155 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force Bad Web Bot
🇧🇬 MazenHost
1793969919 - 11/06/2026 14:58:39 Host: 13.37.76.130/13.37.76.130 Port: 1080 TCP Blocked ...
Port Scan
🇩🇪 Alfafoxtrot
Reason: mass scanner | src-ip: 13.37.76.130 | dport=995 | Protoc.=TCP | Inc. 2d: 1
Port Scan
🇫🇷 Melua
Attempted connection to SSH tarpit
Brute-Force SSH
🇦🇺 LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 9092 [1] TCP
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: HTTP header with cookie; 9092 [1] TCP
Hacking Bad Web Bot
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 23 application-level events across 2 target ports and 23 source port(s). Ports: 10801/service, 9092/service. Sensors: Honeytrap.
Port Scan
🇬🇧 Steve
Attempts against Pop3/IMAP
Brute-Force
🇬🇧 myintarweb
13.37.76.130 - - [06/Nov/2026:10:11:36 +0000] 443 "GET / HTTP/1.0" 400 1676 "-" "-" ...
Hacking Bad Web Bot Web App Attack
🇩🇰 RhQM
Bad Web Bot Exploited Host Web App Attack
🇫🇷 uthul
T-Pot honeypot: 102 hits on ports [4786, 6333, 6379, 7700, 50075, 54321] (automated)
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=22018 dstport=443
Port Scan
🇳🇱 donarev419
Connection to port 5432 with data transfer. Data preview: 
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.149.228.161
🇸🇬 194.5.82.170
🇬🇧 193.176.29.25
🇸🇬 146.174.184.207
🇳🇱 109.160.32.30
🇷🇺 94.143.241.21
🇭🇰 42.200.73.3
🇬🇧 31.14.254.102
🇺🇸 129.121.77.168
🇱🇹 77.90.185.20
🇺🇸 74.197.220.5
🇳🇱 51.136.116.29
🇧🇷 35.199.120.224
🇩🇪 34.179.194.39
🇺🇸 34.73.147.136
🇺🇸 20.84.91.28
feedback