JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.46.248.132

84.46.248.132

Recent Activity

29 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

IPXO

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

vmi3567854.contaboserver.net

Domain Name

telecentras.lt

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 84.46.248.132:

This IP address has been reported a total of 29 times from 26 distinct sources. 84.46.248.132 was first reported on November 28th 2023, and the most recent report was 37 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 9 reports; Germany with 6 reports; France with 5 reports. The most common categories in these recent reports were: Web App Attack 14 times; Brute-Force 12 times; SSH 7 times; Bad Web Bot 6 times; Port Scan 6 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-09-13 15:14:27 (37 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 14:46:50 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 ... show more (mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 10:46:46.535083 2026] [security2:error] [pid 31424:tid 31427] [client 84.46.248.132:52368] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.126:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.126"] [uri "/hello.world"] [unique_id "aqa3VmJ_9tSlJMgtvbPLUwAAAME"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RogueAutomata	2026-09-13 13:45:49 (2 hours ago)	Detected malicious request: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Detections trig ... show more Detected malicious request: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Detections triggered: Environment/config probe Command injection Misc software probe/exploit Access via IP addr (v4) show less	Web App Attack
🇫🇷 Campus France	2026-09-13 12:58:57 (2 hours ago)	[Sun Sep 13 14:58:52.845731 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/va ... show more [Sun Sep 13 14:58:52.845731 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/var/www/html/index.php' not found or unable to stat [Sun Sep 13 14:58:53.261493 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/var/www/html/index.php' not found or unable to stat [Sun Sep 13 14:58:56.424626 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/var/www/html/index.php' not found or unable to stat [Sun Sep 13 14:58:56.636655 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/var/www/html/index.php' not found or unable to stat [Sun Sep 13 14:58:56.733893 2026] [php:error] [pid 3059620] [client 84.46.248.132:48476] script '/var/www/html/index.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇬🇧 Globe2	2026-09-13 12:58:17 (2 hours ago)	SSH brute force attempt detected [server: h1]	SSH
🇧🇬 MazenHost	2026-09-13 12:41:17 (3 hours ago)	Sep 13 15:40:02 irc sshd[1219324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Sep 13 15:40:02 irc sshd[1219324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.46.248.132 Sep 13 15:40:04 irc sshd[1219324]: Failed password for invalid user user from 84.46.248.132 port 51910 ssh2 Sep 13 15:40:38 irc sshd[1219328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.46.248.132 user=root Sep 13 15:40:41 irc sshd[1219328]: Failed password for root from 84.46.248.132 port 57830 ssh2 Sep 13 15:41:14 irc sshd[1219332]: Invalid user user from 84.46.248.132 port 48388 Sep 13 15:41:14 irc sshd[1219332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.46.248.132 Sep 13 15:41:16 irc sshd[1219332]: Failed password for invalid user user from 84.46.248.132 port 48388 ssh2 ... show less	Brute-Force SSH
🇺🇸 kathanp	2026-09-13 12:36:11 (3 hours ago)	Sep 13 12:34:27 nova sshd[81532]: Invalid user admin from 84.46.248.132 port 49662 Sep 13 12:34:59 n ... show more Sep 13 12:34:27 nova sshd[81532]: Invalid user admin from 84.46.248.132 port 49662 Sep 13 12:34:59 nova sshd[81534]: Invalid user user from 84.46.248.132 port 48490 Sep 13 12:36:10 nova sshd[81540]: Invalid user user from 84.46.248.132 port 53450 show less	Brute-Force SSH
🇬🇧 Vluxon, Inc.	2026-09-13 11:32:25 (4 hours ago)	TELNET authentication attack detected by honeypot [Vlux-Sensor-13] on port 23 • Observed: 2026-09-13 ... show more TELNET authentication attack detected by honeypot [Vlux-Sensor-13] on port 23 • Observed: 2026-09-13T11:32:24.436Z • Number of login attempts: 1 • Source ports: 43766 • Submitted by Vlux-Sensor-13 show less	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-09-13 11:28:57 (4 hours ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 44B \| Win: 65535(1) \| rDNS: vmi3567854.contaboserver.net \| F2B/ufw-honeypot@2026-09-13T11:28:57Z show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-09-13 11:19:28 (4 hours ago)	(mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 ... show more (mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 07:19:23.527973 2026] [security2:error] [pid 22155:tid 22155] [client 84.46.248.132:51938] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.151.12:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.151.12"] [uri "/hello.world"] [unique_id "aqaGu1Hs-lY41lYFxfG79QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-13 11:01:39 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 10:59:45 (4 hours ago)	(mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 ... show more (mod_security) mod_security (id:218420) triggered by 84.46.248.132 (vmi3567854.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 06:59:41.259324 2026] [security2:error] [pid 18245:tid 18245] [client 84.46.248.132:41150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.151.28:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.151.28"] [uri "/hello.world"] [unique_id "aqaCHb4aCpQJ2cs_UbEhNQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-09-13 10:55:10 (4 hours ago)	Port Scan Attack proto:TCP src:56925 dst:23	Port Scan
🇫🇷 polarolouis	2026-09-13 10:53:15 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇩🇪 Dennis	2026-09-13 10:48:42 (5 hours ago)	84.46.248.132 has been banned for triggering http-probing (11 events over 1.505310432s).	Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.17.133.138

🇰🇷 175.45.161.140

🇮🇳 59.176.169.216

🇰🇷 59.15.199.42

🇺🇸 2607:f8b0:4001:c0e::123

🇭🇰 199.45.154.186

🇹🇼 188.253.7.4

🇺🇸 159.203.83.195

🇳🇱 146.190.30.184

🇱🇹 62.60.130.18

🇩🇿 41.111.198.172

🇺🇸 209.141.47.217

🇧🇪 185.132.187.240

🇺🇸 155.229.3.18

🇩🇪 135.125.199.17

🇺🇸 69.49.246.176

🇱🇹 62.60.130.201

🇫🇷 51.83.47.23

🇺🇸 34.181.251.130

🇧🇪 34.156.255.204