JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.221.43.90

13.221.43.90 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-221-43-90.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.221.43.90

Whois 13.221.43.90

IP Abuse Reports for 13.221.43.90:

This IP address has been reported a total of 8 times from 7 distinct sources. 13.221.43.90 was first reported on July 16th 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-07-17 10:06:35 (45 minutes ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.221.43.90 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.221.43.90 (US/United States/Virginia/Ashburn/ec2-13-221-43-90.compute-1.amazonaws.com) show less	Bad Web Bot
🇪🇸 NullBlue	2026-07-17 09:25:52 (1 hour ago)	Bad web bot / recon against honeypot. Captured by NullBlue67 honeypot.	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-07-17 08:23:43 (2 hours ago)	(junkbot) REGOLA 8 - Junk Bot Blocked 13.221.43.90 (US/United States/ec2-13-221-43-90.compute-1.amaz ... show more (junkbot) REGOLA 8 - Junk Bot Blocked 13.221.43.90 (US/United States/ec2-13-221-43-90.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.221.43.90 - - [17/Jul/2026:10:23:37 +0200] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, [email protected])" "-" host=matteoappignani.it show less	Port Scan
🇨🇭 backslash	2026-07-17 08:21:00 (2 hours ago)		Bad Web Bot
🇬🇷 setupgr	2026-07-17 06:27:17 (4 hours ago)	(mod_security) mod_security (id:11000010) triggered by 13.221.43.90 (US/United States/Virginia/Ashbu ... show more (mod_security) mod_security (id:11000010) triggered by 13.221.43.90 (US/United States/Virginia/Ashburn/-/[AS14618 AMAZON-AES]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:27:11.989107 2026] [security2:error] [pid 499747:tid 499930] [client 13.221.43.90:39018] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "DotBot" at REQUEST_HEADERS:User-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "114"] [id "11000010"] [msg "BLOCKED BOT: DotBot on sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/robots.txt"] [unique_id "alnLP4Q6ne_kzaWTe90M5AAAA5M"] show less	Port Scan
🇨🇭 4server	2026-07-17 05:05:18 (5 hours ago)	[FriJul1707:05:13.2061652026][security2:error][pid2960737:tid2960953][client13.221.43.90:0]ModSecuri ... show more [FriJul1707:05:13.2061652026][security2:error][pid2960737:tid2960953][client13.221.43.90:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-dominio.ch\"][uri\"/robots.txt\"][unique_id\"alm4CWd4vxR92aveGynvVgAAAEE\"] show less	Hacking Web App Attack
🇸🇬 anotherwatcher	2026-07-17 01:24:33 (9 hours ago)	bad bot	Bad Web Bot
🇩🇪 4server	2026-07-16 21:03:21 (13 hours ago)	[ThuJul1623:03:16.3771532026][security2:error][pid300326:tid300376][client13.221.43.90:0]ModSecurity ... show more [ThuJul1623:03:16.3771532026][security2:error][pid300326:tid300376][client13.221.43.90:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"enricoalbertini.com\"][uri\"/robots.txt\"][unique_id\"allHFJwe9s3rrn_1YLH3aQAAAY4\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 200.10.46.72

🇱🇹 185.169.4.97

🇺🇸 172.59.193.107

🇺🇸 171.22.217.204

🇮🇳 159.65.148.158

🇺🇸 135.119.89.21

🇺🇸 134.122.125.153

🇮🇱 109.226.14.23

🇧🇩 103.4.145.50

🇨🇦 85.217.149.24

🇦🇺 74.91.200.217

🇩🇪 69.5.169.73

🇮🇳 61.3.18.211

🇫🇷 51.75.142.157

🇧🇷 45.227.195.196

🇨🇳 39.156.172.186

🇰🇷 1.214.214.114

🇧🇴 190.181.25.210

🇰🇷 175.45.204.121

🇺🇸 172.172.30.78