Identicon of IP address 13.158.17.238

13.158.17.238

IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 13.158.17.238
Country: Japan flag Japan (JP)
Region Name: Tokyo (13)
City: Tokyo
ISP: Amazon.com
Organization: AWS EC2 (ap-northeast-1)
Threat level: 100 / 100
Conf. level: 100 / 100
Properties
ASN: AS16509
AS Name: Amazon.com, Inc.
Timezone: Asia/Tokyo
Reverse DNS: ec2-13-158-17-238.ap-northeast-1.compute.amazonaws.com
Status: Critical
Hosting

Observed Client Profile
  • OS: macOS (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP has exhibited highly suspicious behavior with multiple requests to sensitive paths, all resulting in 404 errors. The absence of JavaScript support and the high frequency of requests in a short time frame further indicate automated probing. The traffic originates from a known cloud provider, reinforcing the likelihood of malicious intent.

๐Ÿฏ
Honeypot Hit
๐Ÿ“ก
Scanner
JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

IP Location

Region: Tokyo, Japan

City: Tokyo

Local time: 2026-06-22 23:18:20