Identicon of IP address 13.208.224.140

13.208.224.140

IP Risk Score: 87 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 13.208.224.140
Country: Japan flag Japan (JP)
Region Name: ลŒsaka (27)
City: Osaka
ISP: Amazon Technologies Inc.
Organization: AWS EC2 (ap-northeast-3)
Threat level: 87 / 100
Conf. level: 100 / 100
Properties
ASN: AS16509
AS Name: Amazon.com, Inc.
Timezone: Asia/Tokyo
Reverse DNS: ec2-13-208-224-140.ap-northeast-3.compute.amazonaws.com
Status: Critical Null
Hosting

Observed Client Profile
  • OS: Unknown (50%)
  • Device Type: Desktop (100%)
  • Browser Family: Unknown (50%)
  • Rendering Engine: Unknown (50%)
Variability
Behavioral Indicators

The IP shows signs of automated behavior with multiple requests to sensitive paths, including attempts to access configuration files. The presence of a honeypot hit and the use of a known automation user-agent further indicate malicious intent. The traffic originates from a cloud provider, which raises additional concerns about the legitimacy of the activity.

๐Ÿฏ
Honeypot Hit
JavaScript Support
โš ๏ธ No
User-Agent Samples
  • python-httpx/0.28.1
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

IP Location

Region: ลŒsaka, Japan

City: Osaka

Local time: 2026-06-22 21:25:55