AbuseIPDB » 13.229.239.131
13.229.239.131
This IP was reported 7 times. Confidence of
Abuse
is 4% : ?
ISP
Amazon Data Services Singapore
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-13-229-239-131.ap-southeast-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇸🇬
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 13.229.239.131 :
This IP address has been reported a total of
7
times from
2 distinct
sources.
13.229.239.131 was first reported on
October 31st 2025 , and the most recent report was
4 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇵🇱
Budyn
2026-10-22 13:52:41
(4 hours ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_12 | Action: AWS API Call | Token: akf ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_12 | Action: AWS API Call | Token: akf9s74n5eldbzbpzbzf5lt45 | Client Tool: axios/1.18.1
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-22 08:52:55
(9 hours ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbm ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: axios/1.18.1
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-22 06:32:05
(12 hours ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_6 | Action: AWS API Call | Token: d27d ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_6 | Action: AWS API Call | Token: d27dkqjofz7pprlk36nnrvhej | Client Tool: axios/1.18.1
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-22 04:10:49
(14 hours ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_3 | Action: AWS API Call | Token: 4tpv ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_3 | Action: AWS API Call | Token: 4tpvosl7k2etr0dcza06lsb9g | Client Tool: axios/1.18.1
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 01:00:50
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 21:00:45.408655 2025] [security2:error] [pid 10550:tid 10550] [client 13.229.239.131:38822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seizetheseason.com"] [uri "/.env"] [unique_id "aQVbvVbVWhnaInQhMYwYvAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 00:36:32
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 20:36:25.708646 2025] [security2:error] [pid 2839:tid 2839] [client 13.229.239.131:58532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seethrume.com"] [uri "/.env"] [unique_id "aQVWCXJFMhwVUMh4i1X2ZwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 23:55:53
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 13.229.239.131 (ec2-13-229-239-131.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 19:55:47.673800 2025] [security2:error] [pid 18993:tid 18993] [client 13.229.239.131:45654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secureonebank.net"] [uri "/.env"] [unique_id "aQVMg83XcZir2r8Vpps3bQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: