JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

93.90.74.28

Neutral Activity

Abuse confidence score ?

0% Low Risk

105 reports

61 reporters · latest 2 months ago

ISP	RCS Technologies FZE LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203446
Domain Name	rcstech.ae
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

93.90.74.28 has been reported 105 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 93.90.74.28

Export CSV

This IP address has been reported a total of 105 times from 61 distinct sources. 93.90.74.28 was first reported on May 14th 2025, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-07-25 01:44:09 (2 months ago)	Unsolicited ICMP traffic \| Action: DROP \| Port N/A	Brute-Force
🇮🇹 VHosting	2025-09-17 12:18:18 (1 year ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-08-03 05:14:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 01:14:14.092051 2025] [security2:error] [pid 32704:tid 32704] [client 93.90.74.28:37978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.infalliblebible.com"] [uri "/.git/config"] [unique_id "aI7wJlV1hhrKvJ7XszHMhQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-03 04:47:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 00:47:15.531813 2025] [security2:error] [pid 18937:tid 18937] [client 93.90.74.28:36590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lacycustombuilt.com"] [uri "/wp-config.phpback"] [unique_id "aI7p0yILwptOLJuAaGzIagAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-08-02 23:12:53 (1 year ago)	Restricted File Access Attempt. Matched phrase "wp-config.php" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
Anonymous	2025-08-02 15:10:08 (1 year ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-02 14:26:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 02 10:26:10.255157 2025] [security2:error] [pid 19593:tid 19593] [client 93.90.74.28:48538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.michaelpmcgrath.com"] [uri "/.git/config"] [unique_id "aI4gAk2bmXWHch4p9Y89sgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (1 year ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-08-01 19:30:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 15:30:44.001425 2025] [security2:error] [pid 16219:tid 16219] [client 93.90.74.28:45552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoughtonpipeandwelding.net"] [uri "/wp-config.php-lixo"] [unique_id "aI0V5Lpd3EXLQ5iJ-7E5pAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-07-31 21:18:22 (1 year ago)	Form spam	Web Spam
🇬🇧 Silly Development	2025-07-31 11:48:43 (1 year ago)	Malicious activity detected from 203446 AS203446 towards host panel.sillydev.co.uk (GET HTTP/2) @ 20 ... show more Malicious activity detected from 203446 AS203446 towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-07-31T11:48:43Z (4 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2025-07-29 05:40:36 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 01:40:30.364308 2025] [security2:error] [pid 3455964:tid 3456064] [client 93.90.74.28:39924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.npaccountants.org"] [uri "/.git/config"] [unique_id "aIhezuXEomZVSsM44_G5gAAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-29 05:03:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 01:03:06.425740 2025] [security2:error] [pid 32558:tid 32558] [client 93.90.74.28:50590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mmldesign.com"] [uri "/.git/config"] [unique_id "aIhWCmrU2lmcQsPawI5sMgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-29 01:49:44 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 21:49:40.500560 2025] [security2:error] [pid 9838:tid 9838] [client 93.90.74.28:43860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.explorediablo.com"] [uri "/.git/config"] [unique_id "aIgotEn7KgQNn95E9aaNywAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-29 00:37:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 93.90.74.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 20:37:13.729249 2025] [security2:error] [pid 20675:tid 20675] [client 93.90.74.28:38590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gaudensinnovo.com"] [uri "/.git/config"] [unique_id "aIgXuVyiyY1HLpt7sz9u0QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 216.234.208.198

🇨🇦 216.26.234.13

🇺🇸 216.26.228.51

🇩🇪 167.94.146.39

🇺🇸 147.185.132.63

🇦🇱 141.98.140.140

🇨🇳 122.225.246.246

🇮🇳 122.179.132.56

🇺🇸 104.207.32.5

🇻🇳 103.60.242.169

🇻🇳 103.53.158.121

🇫🇷 91.231.89.254

🇬🇧 78.153.140.235

🇺🇸 65.111.15.209

🇺🇸 43.153.14.44

🇨🇳 8.129.101.248

🇺🇸 209.50.175.175

🇺🇸 209.50.168.246

🇳🇵 202.70.79.109

🇬🇧 200.138.46.57