JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.221.252.102

13.221.252.102 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-221-252-102.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.221.252.102

Whois 13.221.252.102

IP Abuse Reports for 13.221.252.102:

This IP address has been reported a total of 72 times from 61 distinct sources. 13.221.252.102 was first reported on May 28th 2026, and the most recent report was 54 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Petre 21_ip	2026-06-05 03:51:12 (54 minutes ago)	2026-06-05T05:51:12.325410+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-05T05:51:12.325410+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=13.221.252.102 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=46685 DF PROTO=TCP SPT=15822 DPT=9200 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 ITSNF	2026-06-04 21:00:10 (7 hours ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=8443	Port Scan Hacking
🇩🇪 cloudmax	2026-06-04 08:16:40 (20 hours ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇨🇦 Tanados	2026-06-04 02:35:26 (1 day ago)	Blocked by UFW [3000/tcp] Source port: 43840 TTL: 115 Packet length: 60 TOS: 0x00 This report was g ... show more Blocked by UFW [3000/tcp] Source port: 43840 TTL: 115 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 ycwong	2026-06-04 01:33:00 (1 day ago)	TCP Flood	DDoS Attack
🇩🇪 _ArminS_	2026-06-03 21:42:41 (1 day ago)	SP-Scan 41674:12443 detected 2026.06.03 23:42:41 blocked until 2026.07.23 16:45:28	Port Scan
Anonymous	2026-06-03 20:40:59 (1 day ago)	unsolicited connect TCP dport 50050 (sport 20224)	Hacking
🇺🇸 rellim.com	2026-06-03 20:09:03 (1 day ago)	Jun 3 02:16:07 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jun 3 02:16:07 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.221.252.102 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=9932 DF PROTO=TCP SPT=17704 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 Jun 3 02:16:08 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.221.252.102 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=9933 DF PROTO=TCP SPT=17704 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 Jun 3 02:16:10 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.221.252.102 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=9934 DF PROTO=TCP SPT=17704 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 somosbr	2026-06-03 16:25:49 (1 day ago)	[2026-06-03T16:25:49Z] Unsolicited scan from 13.221.252.102 to port 3232/tcp	Port Scan
Anonymous	2026-06-03 15:53:04 (1 day ago)	Reported from Nginx log analysis 17. Log: 13.221.252.102 - - [03/Jun/2026:xx:xx:xx 0200] "GET /favi ... show more Reported from Nginx log analysis 17. Log: 13.221.252.102 - - [03/Jun/2026:xx:xx:xx 0200] "GET /favicon.ico HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "-" "US United States Ashburn" "AS14618" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
Anonymous	2026-06-03 10:17:02 (1 day ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	Web App Attack
🇧🇷 chronos	2026-06-03 07:29:13 (1 day ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United S ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: United States, Ashburn show less	Port Scan Web App Attack Exploited Host
🇺🇸 Cyber Crusader	2026-06-03 07:10:03 (1 day ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 bescared	2026-06-03 03:33:00 (2 days ago)	F2B - Malicious activity detected. Excessive port scans. -c23856ef-	Port Scan
🇦🇹 Pingger Shikkoken	2026-06-03 03:32:55 (2 days ago)	2026-06-03T03:32:55+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-03T03:32:55+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=13.221.252.102 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=22174 DF PROTO=TCP SPT=34266 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 2026-06-03T03:32:56+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=13.221.252.102 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=22175 DF PROTO=TCP SPT=34266 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 2026-06-03T03:32:58+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=13.221.252.102 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=22176 DF PROTO=TCP SPT=34266 DPT=56001 WINDOW=62727 RES=0x00 SYN URGP=0 show less	Hacking

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.168

🇺🇸 172.217.107.145

🇮🇶 169.224.42.158

🇱🇹 141.98.10.180

🇮🇪 108.130.229.68

🇷🇴 92.118.39.62

🇺🇸 66.132.186.195

🇨🇳 60.10.155.130

🇨🇳 58.54.35.2

🇵🇱 45.43.137.130

🇺🇸 195.184.76.5

🇧🇷 191.241.92.165

🇺🇸 146.88.241.134

🇨🇳 120.48.54.225

🇸🇬 112.199.243.59

🇵🇭 112.198.14.194

🇳🇱 107.189.27.145

🇺🇸 73.173.232.206

🇺🇸 64.62.197.43

🇱🇹 45.227.254.170