JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.222.142.21

13.222.142.21 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-13-222-142-21.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.222.142.21

Whois 13.222.142.21

IP Abuse Reports for 13.222.142.21:

This IP address has been reported a total of 83 times from 70 distinct sources. 13.222.142.21 was first reported on July 1st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-11 08:24:33 (6 hours ago)	Blocked by UFW (TCP on 8443) Source port: 23930 TTL: 121 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8443) Source port: 23930 TTL: 121 Packet length: 60 TOS: 0x00 This report (for 13.222.142.21) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 OptimusGO	2026-07-11 06:55:08 (7 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-11 07:55:07 UTC Log evidence: 07/11/2026-07:55:06.201604 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 13.222.142.21:57834 -> 185.127.18.66:8443 show less	Port Scan Brute-Force
🇩🇪 dispaisyenterprises	2026-07-11 03:27:45 (10 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-07-11 03:16:30 (11 hours ago)	1783739789 - 07/11/2026 05:16:29 Host: 13.222.142.21/13.222.142.21 Port: 21 TCP Blocked ...	Port Scan
🇩🇪 femboy.cat	2026-07-11 01:28:25 (12 hours ago)	Port scan to tcp/9200 from 13.222.142.21	Brute-Force
🇺🇸 conrad10781	2026-07-10 22:15:03 (16 hours ago)	nginx-direct-ip	Port Scan
🇳🇱 StopAbuse	2026-07-10 20:50:19 (17 hours ago)	tcp/1244	Port Scan
Anonymous	2026-07-10 14:50:22 (23 hours ago)	PAD: ModSec_Scanner! detected	Bad Web Bot
🇺🇸 rellim.com	2026-07-10 09:16:21 (1 day ago)	Jul 10 02:16:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jul 10 02:16:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.222.142.21 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=113 ID=15692 DF PROTO=TCP SPT=57698 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 10 02:16:18 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.222.142.21 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=113 ID=15693 DF PROTO=TCP SPT=57698 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 10 02:16:20 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=13.222.142.21 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=113 ID=15694 DF PROTO=TCP SPT=57698 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇷🇴 abuse_IP_reporter	2026-07-10 07:45:03 (1 day ago)	Jul 10 10:16:12 server UFW BLOCK SRC=13.222.142.21 DF PROTO=TCP SPT=44232	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-10 05:33:22 (1 day ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇯🇵 jay hung	2026-07-10 05:33:12 (1 day ago)	2026-07-10T05:33:12.219618+00:00 quarktech kernel: [2306251.146752] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-10T05:33:12.219618+00:00 quarktech kernel: [2306251.146752] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=13.222.142.21 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x40 TTL=108 ID=16055 DF PROTO=TCP SPT=40398 DPT=9443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 pingusurmars	2026-07-10 03:37:31 (1 day ago)	Blocked by UFW on amperetwo [7547/tcp] Source port: 52236 TTL: 118 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [7547/tcp] Source port: 52236 TTL: 118 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-10 03:34:32 (1 day ago)	Unauthorized attempt on coresecret [21/tcp] Source port: 45114 TTL: 117 Packet length: 60 TOS: 0x00 ... show more Unauthorized attempt on coresecret [21/tcp] Source port: 45114 TTL: 117 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇦🇹 Pingger Shikkoken	2026-07-10 03:34:32 (1 day ago)	2026-07-10T03:34:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-07-10T03:34:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.222.142.21 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=64520 DF PROTO=TCP SPT=40076 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-07-10T03:34:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.222.142.21 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=64521 DF PROTO=TCP SPT=40076 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-07-10T03:34:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.222.142.21 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=64522 DF PROTO=TCP SPT=40076 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	FTP Brute-Force Hacking

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.108

🇪🇹 196.188.187.59

🇲🇾 180.75.123.179

🇻🇳 171.244.39.192

🇯🇵 157.107.224.37

🇺🇸 107.147.229.144

🇻🇳 103.15.222.152

🇷🇺 45.195.221.26

🇳🇱 45.148.10.141

🇳🇱 217.60.195.59

🇨🇭 194.191.229.153

🇵🇪 190.117.232.16

🇩🇪 178.105.95.88

🇺🇸 164.90.132.56

🇰🇷 124.216.129.15

🇬🇧 46.101.77.4

🇻🇳 42.115.212.25

🇰🇿 37.99.70.168

🇨🇳 14.103.111.162

🇨🇳 223.199.167.12