JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.202.82.104

Activity Trending Down

Abuse Confidence Score

13% Caution

15 reports

13 reporters · latest 1 week ago

ISP: Hosting servers physically located in United Kingdom
Usage Type: Data Center/Web Hosting/Transit
ASN: AS59651
Domain Name: apexdatasolutions.online
Country: 🇺🇸 United States of America
City: Newark, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 13 distinct reporters

First reported

February 8th 2021

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇫🇷 France 1 🇺🇸 United States of America 1

Most common categories Brute-Force 1 Bad Web Bot 1 Hacking 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-02 17:30:13 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 193.202.82.104 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:30:07.235956 2026] [security2:error] [pid 4270:tid 4270] [client 193.202.82.104:39395] M ... show more (mod_security) mod_security (id:210350) triggered by 193.202.82.104 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:30:07.235956 2026] [security2:error] [pid 4270:tid 4270] [client 193.202.82.104:39395] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|passwordresearch.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic116.html"] [unique_id "aujIn72XNf-s-fJ6AYQeIQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-23 16:14:00 UTC · (2 weeks ago)	Activity from blacklisted IP	Hacking
🇧🇪 cmbplf	2026-08-06 18:21:21 UTC · (3 months ago)	542 limiting connections by zone (13m59s)	DDoS Attack
🇩🇪 FeG Deutschland	2026-07-25 05:49:53 UTC · (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TRoden	2026-04-20 14:41:29 UTC · (6 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇺🇸 ne1for23	2026-02-27 14:09:17 UTC · (8 months ago)	193.202.82.104 - - [27/Feb/2026:14:09:17 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Wget/1.21.4"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-08-25 22:24:56 UTC · (1 year ago)	(mod_security) mod_security (id:210831) triggered by 193.202.82.104 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 18:24:50.005646 2025] [security2:error] [pid 29277:tid 29277] [client 193.202.82.104:37713] ... show more (mod_security) mod_security (id:210831) triggered by 193.202.82.104 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 18:24:50.005646 2025] [security2:error] [pid 29277:tid 29277] [client 193.202.82.104:37713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "aKzisgsuM9_KvU3mVlazzAAAAA8"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-04-01 10:47:03 UTC · (1 year ago)	GlobalProtect login attempts with user mhayes.	VPN IP Brute-Force
🇨🇭 backslash	2024-08-30 08:55:04 UTC · (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇵🇱 rafix	2023-11-01 00:27:51 UTC · (3 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot
🇺🇸 RLDD	2023-03-25 02:36:29 UTC · (3 years ago)	WP probing for vulnerabilities -eld	Web App Attack
🇪🇸 10dencehispahard SL	2023-03-24 03:25:22 UTC · (3 years ago)	Unauthorized login attempts [{'wordpress'}]	Brute-Force Web App Attack
🇺🇸 mnsf	2023-03-20 01:07:13 UTC · (3 years ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇩🇪 /dev/null	2021-07-21 07:41:59 UTC · (5 years ago)	CMS Bruteforce / WebApp Attack attempt	Hacking Web App Attack
🇨🇭 backslash	2021-02-08 04:50:05 UTC · (5 years ago)		Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 172.83.253.220

🇸🇪 85.225.13.121

🇺🇸 66.132.172.141

🇮🇳 47.15.29.96

🇺🇸 45.61.158.133

🇺🇸 8.8.8.8

🇺🇸 199.165.159.45

🇬🇧 193.117.233.198

🇵🇰 187.55.150.246

🇨🇳 183.224.97.83

🇮🇳 103.163.43.19

🇩🇪 84.200.80.6

🇺🇸 68.225.62.250

🇺🇸 66.132.224.230

🇳🇱 64.205.72.130

🇫🇷 51.255.79.229

🇺🇸 20.12.242.187

🇺🇸 13.220.209.236

🇺🇸 216.73.160.4

🇺🇸 195.184.76.133