13.221.9.108
IP Risk Score: 85 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Unknown (100%)
- Device Type: Desktop (100%)
- Browser Family: Safari (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of malicious intent with a honeypot hit and access to sensitive paths resulting in a 403 status. The user-agent appears to be spoofed, and the traffic originates from a known cloud provider, indicating potential automated activity.
The supernet (13.221.0.0/16), which this IP belongs to, exhibits behavior indicative of automated scraping and potential misuse of legitimate infrastructure, with multiple IPs showing repetitive low-value interactions and a mix of legitimate and suspicious user agents. The presence of honeypot hits and high-frequency 404 responses suggests coordinated activity that may be aimed at analytics pollution.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (SymbianOS/9.1; U; en-us) AppleWebKit/413 (KHTML, like Gecko) Safari/413 es50
IP Location
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 09:30:50