13.221.21.253
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-13-221-21-253.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
65 from
56 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=3232
|
Port Scan Hacking | |
| 🇫🇷 zulzeen |
[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)
|
Port Scan | |
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: xavier/nftables-scan-any-port
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [443/tcp]
Source port: 14774
TTL: 111
Packet length: 60
TOS: 0x08
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 818 payload byte(s) total, maximum payload 205 byte(s). Target port(s): 7547.
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 6 hits on ports [9200] (automated)
|
Port Scan | |
| 🇷🇺 akokarev |
MikroTik autoban
|
Port Scan | |
| 🇺🇸 jbettigole |
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
|
Brute-Force Hacking | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇩🇪 Xorog |
[Sun Nov 8 08:53:12 PM CET 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
|
Brute-Force SSH Port Scan Hacking | |
| 🇨🇦 lakered |
|
Port Scan Exploited Host | |
| 🇺🇸 pshempel |
VyOS perimeter firewall blocked 39 inbound TCP packets (Subnet sweep across 13 hosts) targeting port(s) [8080].
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-08 09:35:09 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown