AbuseIPDB » 63.178.203.26
63.178.203.26
This IP was reported 3 times. Confidence of
Abuse
is 14% : ?
ISP
A100 ROW GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-63-178-203-26.eu-central-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 63.178.203.26 :
This IP address has been reported a total of
3
times from
2 distinct
sources.
63.178.203.26 was first reported on
June 17th 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-17 02:30:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 63.178.203.26 (ec2-63-178-203-26.eu-central-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 63.178.203.26 (ec2-63-178-203-26.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 22:30:35.678124 2026] [security2:error] [pid 8192:tid 8192] [client 63.178.203.26:60364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electric-meat-grinder.com"] [uri "/.git/config"] [unique_id "ajIGy3kXSM1Ks-y6aBPavwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 02:13:41
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 63.178.203.26 (ec2-63-178-203-26.eu-central-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 63.178.203.26 (ec2-63-178-203-26.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 22:13:37.281994 2026] [security2:error] [pid 5033:tid 5033] [client 63.178.203.26:50554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electra-shield.com"] [uri "/.git/config"] [unique_id "ajIC0Re4nZrT091ckOXZowAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-17 01:00:29
(4 days ago)
(caddyscan) Scanner path probe from 63.178.203.26 (DE/Germany/ec2-63-178-203-26.eu-central-1.compute ...
show more
(caddyscan) Scanner path probe from 63.178.203.26 (DE/Germany/ec2-63-178-203-26.eu-central-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 63.178.203.26 - - [17/Jun/2026:01:00:28 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 63.178.203.26 - - [17/Jun/2026:01:00:28 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 63.178.203.26 - - [17/Jun/2026:01:00:28 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 63.178.203.26 - - [17/Jun/2026:01:00:29 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 63.178.203.26 - - [17/Jun/2026:01:00:29 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: