13.221.3.234
IP Risk Score: 35 / 100
This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: iOS (100%)
- Device Type: Mobile (100%)
- Browser Family: Unknown (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP address is associated with AWS infrastructure and has a single access event with a mobile user-agent. The lack of JavaScript support raises concerns about potential automation, but the overall activity is low and does not indicate clear malicious intent.
The supernet (13.221.0.0/16), which this IP belongs to, exhibits behavior indicative of automated scraping and potential misuse of legitimate infrastructure, with multiple IPs showing repetitive low-value interactions and a mix of legitimate and suspicious user agents. The presence of honeypot hits and high-frequency 404 responses suggests coordinated activity that may be aimed at analytics pollution.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148
IP Location
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 09:08:51