JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.202.110.19

193.202.110.19 was found in our database!

This IP was reported 661 times. Confidence of Abuse is 0%: ?

ISP	One.com A/S
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51468
Hostname(s)	customer-nat.pub.webpod1-osl1.one.com
Domain Name	one.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.202.110.19

Whois 193.202.110.19

IP Abuse Reports for 193.202.110.19:

This IP address has been reported a total of 661 times from 99 distinct sources. 193.202.110.19 was first reported on February 1st 2022, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2025-12-30 04:40:51 (8 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)	Web App Attack
🇩🇪 LRob	2025-12-30 00:08:48 (8 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-12-29 20:10:43 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 KnightIndustries	2025-12-29 12:20:38 (8 months ago)	2025-12-29T13:20:37.507231+01:00 milkyway wordpress(fawcettcomputerservices.com)[457392]: XML-RPC au ... show more 2025-12-29T13:20:37.507231+01:00 milkyway wordpress(fawcettcomputerservices.com)[457392]: XML-RPC authentication failure for joshua from 193.202.110.19 2025-12-29T13:20:37.886823+01:00 milkyway wordpress(fawcettcomputerservices.com)[451265]: XML-RPC authentication failure for joshua from 193.202.110.19 2025-12-29T13:20:38.256649+01:00 milkyway wordpress(fawcettcomputerservices.com)[452694]: XML-RPC authentication failure for joshua from 193.202.110.19 ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2025-12-29 07:56:41 (8 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-28 19:58:17 (8 months ago)	(mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.o ... show more (mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.one.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 14:58:11.849935 2025] [security2:error] [pid 26825:tid 26825] [client 193.202.110.19:60114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.202.110.19 (+1 hits since last alert)\|laecovillage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laecovillage.org"] [uri "/xmlrpc.php"] [unique_id "aVGL05fzREDhWme0YzPwgAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 18:02:56 (8 months ago)	(mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.o ... show more (mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.one.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 13:02:52.896968 2025] [security2:error] [pid 3951:tid 3951] [client 193.202.110.19:48832] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.202.110.19 (+1 hits since last alert)\|velvetculture.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "velvetculture.com"] [uri "/xmlrpc.php"] [unique_id "aVFwzL59NZ7pvC-BVwkSAwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 15:47:47 (8 months ago)	(mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.o ... show more (mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.one.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 10:47:39.943075 2025] [security2:error] [pid 20993:tid 20993] [client 193.202.110.19:42392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.202.110.19 (+1 hits since last alert)\|riser-astrology.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riser-astrology.com"] [uri "/xmlrpc.php"] [unique_id "aVFRG1mo_GJKhdW8klZ8mwAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 10:09:29 (8 months ago)	(mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.o ... show more (mod_security) mod_security (id:240335) triggered by 193.202.110.19 (customer-nat.pub.webpod1-osl1.one.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 05:09:20.951622 2025] [security2:error] [pid 23381:tid 23381] [client 193.202.110.19:35694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.202.110.19 (+1 hits since last alert)\|splashstation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "splashstation.org"] [uri "/xmlrpc.php"] [unique_id "aVEB0No0WyijZ8_rpR8jcAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-28 09:32:48 (8 months ago)	[redacted] 193.202.110.19 - - [28/Dec/2025:10:32:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 193.202.110.19 - - [28/Dec/2025:10:32:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" [redacted] 193.202.110.19 - - [28/Dec/2025:10:32:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" [redacted] 193.202.110.19 - - [28/Dec/2025:10:32:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" [redacted] 193.202.110.19 - - [28/Dec/2025:10:32:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" [redacted] 193.202.110.19 - - [28/Dec/2025:10:32:47 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Moz ... show less	Hacking Web App Attack
🇺🇸 WeekendWeb	2025-12-28 07:02:00 (8 months ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 dbmwebdesign	2025-12-28 00:35:24 (8 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 Kenshin869	2025-12-27 21:16:39 (8 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-27 20:10:41 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 stinpriza	2025-12-25 07:46:02 (8 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 661 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.77.28.78

🇺🇸 195.184.76.208

🇺🇸 195.184.76.185

🇳🇱 193.47.62.69

🇧🇷 177.22.24.139

🇺🇸 136.67.214.14

🇩🇪 104.28.229.14

🇻🇳 103.200.25.198

🇮🇷 95.38.177.52

🇺🇸 66.132.195.43

🇺🇸 40.124.116.90

🇮🇩 182.8.65.34

🇩🇪 167.94.146.73

🇺🇸 146.190.134.221

🇮🇶 122.102.119.48

🇵🇹 87.103.126.54

🇩🇪 85.214.143.195

🇰🇷 59.8.114.245

🇮🇱 46.116.177.101

🇳🇱 45.156.128.58