AbuseIPDB » 13.239.138.233
13.239.138.233 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 25%: ?
| ISP |
Amazon Corporate Services Pty Ltd
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS16509
|
| Hostname(s) |
ec2-13-239-138-233.ap-southeast-2.compute.amazonaws.com
|
| Domain Name |
amazon.com.au
|
| Country |
๐ฆ๐บ
Australia
|
| City |
Sydney, New South Wales
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 13.239.138.233:
This IP address has been reported a total of
5
times from
4 distinct
sources.
13.239.138.233 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
๐ซ๐ท
phoenix1jl96
|
|
2026/07/18 02:50:17 [error] 197029#197029: *592240 open() "/home/user-data/www/default/mailer/.env" ...
show more
2026/07/18 02:50:17 [error] 197029#197029: *592240 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 13.239.138.233, server: mta-sts.epouville.fr, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.epouville.fr"
2026/07/18 02:50:18 [error] 197029#197029: *592240 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 13.239.138.233, server: mta-sts.epouville.fr, request: "GET /mail/.env HTTP/1.1", host: "mta-sts.epouville.fr"
...
show less
|
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
|
|
|
๐ซ๐ท
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
๐ซ๐ฎ
indev.fi
|
|
postitalo.peltopiri.com 13.239.138.233 - - [17/Jul/2026:04:15:54 +0300] "GET /.git/config HTTP/1.1" ...
show more
postitalo.peltopiri.com 13.239.138.233 - - [17/Jul/2026:04:15:54 +0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
postitalo.peltopiri.com 13.239.138.233 - - [17/Jul/2026:04:15:56 +0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
postitalo.peltopiri.com 13.239.138.233 - - [17/Jul/2026:04:15:57 +0300] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Port Scan
Hacking
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 13.239.138.233 (ec2-13-239-138-233.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 13.239.138.233 (ec2-13-239-138-233.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:54:05.348567 2026] [security2:error] [pid 7576:tid 7588] [client 13.239.138.233:51262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dinius.org"] [uri "/.git/config"] [unique_id "allvHSyj6sUpwoN57rlLLwAAAUg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 13.239.138.233 (ec2-13-239-138-233.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 13.239.138.233 (ec2-13-239-138-233.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:04:11.092965 2026] [security2:error] [pid 17395:tid 17399] [client 13.239.138.233:49264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.businesscertification.org"] [uri "/.git/config"] [unique_id "allja9X2W1QIXQIi-EoLswAAAEI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: