JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 63.183.57.131

63.183.57.131 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 66%: ?

66%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-63-183-57-131.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 63.183.57.131

Whois 63.183.57.131

IP Abuse Reports for 63.183.57.131:

This IP address has been reported a total of 15 times from 11 distinct sources. 63.183.57.131 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 12:59:50 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:59:45.220021 2026] [security2:error] [pid 102448:tid 102509] [client 63.183.57.131:44502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ainavelas.com.venezuelaguia.com"] [uri "/.git/config"] [unique_id "amdWQd6KpcFeDvSPPlv1NAAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:37:35 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:37:31.578383 2026] [security2:error] [pid 564552:tid 564552] [client 63.183.57.131:42352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aimer.es.aticom.es"] [uri "/.git/config"] [unique_id "amdC-yKmvj1msLv4eqZ9AQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 05:14:50 (10 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 dynamix	2026-07-26 11:25:29 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-26 08:47:45 (1 day ago)	63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.git/config HTTP/1.1" 404 441 "-" "Mozilla/5.0 ... show more 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.git/config HTTP/1.1" 404 441 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.git/config HTTP/1.1" 404 245 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.env HTTP/1.1" 404 441 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.env HTTP/1.1" 404 245 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.env.local HTTP/1.1" 404 441 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 63.183.57.131 - - [26/Jul/2026:10:47:43 +0200] "GET /.env.lo ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 04:19:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:19:40.588162 2026] [security2:error] [pid 29040:tid 29040] [client 63.183.57.131:54732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.americaskitchencoachcom.indie100.com"] [uri "/.git/config"] [unique_id "amWK3IMr6fTbI4eMtMhEGAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 02:14:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:14:28.085445 2026] [security2:error] [pid 4106007:tid 4106164] [client 63.183.57.131:59656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.americanacademyofprojectmanagement.com.aafm.us"] [uri "/.git/config"] [unique_id "amVthLuYOHvBDbw0HxlkEQAAAdI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-25 09:13:21 (2 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/ec2-63-183-57-131.eu-central-1.co ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/ec2-63-183-57-131.eu-central-1.compute.amazonaws.com show less	Web App Attack
🇩🇪 DocNetzwerk	2026-07-25 01:11:35 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 63.183.57.131 (DE/Germany/ec2-63-183-57 ... show more (mod_security) mod_security triggered on hostname [redacted] 63.183.57.131 (DE/Germany/ec2-63-183-57-131.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇳🇱 homeshowdomain.nl	2026-07-24 22:02:29 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 05:10:56 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇦🇺 2000cn.com.au	2026-07-24 04:36:11 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-24 04:01:20 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.c ... show more (mod_security) mod_security (id:210492) triggered by 63.183.57.131 (ec2-63-183-57-131.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:01:13.997030 2026] [security2:error] [pid 1744014:tid 1744014] [client 63.183.57.131:32842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janton.com"] [uri "/.git/config"] [unique_id "amLjiSJ6DZDd1Wx6edqQEQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-24 03:17:58 (3 days ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇫🇷 Octopuce	2026-07-24 03:16:41 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.85.247.230

🇳🇱 104.28.249.138

🇮🇩 103.97.101.25

🇫🇷 92.222.108.101

🇧🇬 79.124.62.230

🇺🇸 43.135.182.95

🇨🇭 20.203.133.142

🇸🇬 18.140.71.244

🇺🇸 178.16.55.50

🇪🇸 158.158.76.106

🇸🇬 103.189.235.176

🇮🇳 103.88.76.27

🇬🇧 89.37.172.158

🇫🇷 85.217.140.11

🇱🇹 77.90.185.20

🇺🇸 67.222.30.86

🇺🇸 34.138.135.178

🇩🇪 209.38.247.47

🇺🇸 170.106.173.170

🇯🇵 155.2.216.30