AbuseIPDB » 3.78.187.162
3.78.187.162
This IP was reported 10 times. Confidence of
Abuse
is 29% : ?
ISP
A100 ROW GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-78-187-162.eu-central-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.78.187.162 :
This IP address has been reported a total of
10
times from
10 distinct
sources.
3.78.187.162 was first reported on
April 29th 2026 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
ghostwarriors
2026-04-29 21:20:04
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
2026-04-29 21:14:48
(1 month ago)
Aggressive web scan
Web App Attack
🇫🇷
Thaliruth
2026-04-29 21:10:26
(1 month ago)
[29/Apr/2026:23:10:25.780065 +0200] afJzwcMSD7e-iKcQ1_vE-gAAABc 3.78.187.162 41304 127.0.0.1 7080
.. ...
show more
[29/Apr/2026:23:10:25.780065 +0200] afJzwcMSD7e-iKcQ1_vE-gAAABc 3.78.187.162 41304 127.0.0.1 7080
...
show less
Hacking
🇩🇪
london2038.com
2026-04-29 21:10:16
(1 month ago)
Connection atttempts against closed TCP ports
Apr 29 23:10:13 BLOCK SRC=3.78.187.162 LEN=60 TOS=0x00 ...
show more
Connection atttempts against closed TCP ports
Apr 29 23:10:13 BLOCK SRC=3.78.187.162 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=44530 DF PROTO=TCP SPT=50270 DPT=42062 WINDOW=62727 RES=0x00 SYN
Apr 29 23:10:14 BLOCK SRC=3.78.187.162 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=44531 DF PROTO=TCP SPT=50270 DPT=42062 WINDOW=62727 RES=0x00 SYN
Apr 29 23:10:15 BLOCK SRC=3.78.187.162 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=44532 DF PROTO=TCP SPT=50270 DPT=42062 WINDOW=62727 RES=0x00 SYN
show less
Port Scan
🇺🇸
CBJ
2026-04-29 21:08:52
(1 month ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 21:08:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 3.78.187.162 (ec2-3-78-187-162.eu-central-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 3.78.187.162 (ec2-3-78-187-162.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 17:08:29.961307 2026] [security2:error] [pid 4794:tid 4794] [client 3.78.187.162:62372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.189"] [uri "/.env"] [unique_id "afJzTQlKuGrb1-KYH9KcWAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-04-29 21:08:19
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇦🇹
Markus Woegerbauer
2026-04-29 21:08:01
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 3.78.187.162 (DE/Germany/ec2-3-78-187-1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 3.78.187.162 (DE/Germany/ec2-3-78-187-162.eu-central-1.compute.amazonaws.com)
show less
SQL Injection
🇳🇱
Savvii
2026-04-29 21:05:59
(1 month ago)
15 attempts against mh-modsecurity-ban on tilia
Brute-Force
Web App Attack
🇮🇹
LTM
2026-04-29 06:20:01
(1 month ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: