JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.42.99.102

193.42.99.102 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 66%: ?

66%

ISP	Packethub S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	packethub.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.42.99.102

Whois 193.42.99.102

IP Abuse Reports for 193.42.99.102:

This IP address has been reported a total of 16 times from 12 distinct sources. 193.42.99.102 was first reported on August 30th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-17 06:54:57 (5 hours ago)	Web vulnerability probing: /.git/HEAD	Web App Attack
🇮🇩 Burayot	2026-07-17 03:49:34 (8 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.42.99.102 (PL/Poland/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.42.99.102 (PL/Poland/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 rdpguard.com	2026-07-17 03:34:06 (8 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 03:11:42 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:11:38.697675 2026] [security2:error] [pid 187952:tid 188051] [client 193.42.99.102:11002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uoexpanse.com"] [uri "/.git/HEAD"] [unique_id "almdahEfOsr0gg323qT4uwAAAhc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:07:22 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:07:16.390960 2026] [security2:error] [pid 117414:tid 117414] [client 193.42.99.102:9220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marveldirectory.com"] [uri "/.git/HEAD"] [unique_id "almOVL6owZXxoz0ci4M9YQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-17 01:07:00 (11 hours ago)	[FriJul1703:06:55.7651012026][security2:error][pid2089772:tid2089989][client193.42.99.102:0]ModSecur ... show more [FriJul1703:06:55.7651012026][security2:error][pid2089772:tid2089989][client193.42.99.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hostingedominio.com\"][uri\"/.git/HEAD\"][unique_id\"almALzpG8QPzYKJAJuyS_gAAAUQ\"] show less	Hacking Web App Attack
🇵🇱 sefinek.net	2026-07-17 00:16:34 (11 hours ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-16 22:32:19 (13 hours ago)	Agressive scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇳🇱 informedclearly.com	2026-07-16 09:23:56 (1 day ago)	WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/HEAD? ua=Mozilla/5.0 (Windows NT 10.0; Win6 ... show more WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/HEAD? ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 show less	Hacking
🇺🇸 TPI-Abuse	2026-07-16 08:39:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 04:39:25.580035 2026] [security2:error] [pid 25521:tid 25521] [client 193.42.99.102:43274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "businessvaluationapp.com"] [uri "/.git/HEAD"] [unique_id "aliYvUS7Atlvr0rRmWh0GwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 tmiland	2026-07-16 08:30:31 (1 day ago)	(nginx_404) Dot directory Honeypot Trap 193.42.99.102 (PL/Poland/-): 2 in the last 3600 secs; IP: 19 ... show more (nginx_404) Dot directory Honeypot Trap 193.42.99.102 (PL/Poland/-): 2 in the last 3600 secs; IP: 193.42.99.102; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 193.42.99.102 - - [16/Jul/2026:10:30:25 +0200] "GET /.git/HEAD HTTP/1.1" 404 68204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 193.42.99.102 - - [16/Jul/2026:10:30:26 +0200] "GET /.git/HEAD HTTP/1.1" 404 68204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" show less	Brute-Force
🇩🇪 Bedios GmbH	2026-07-16 08:02:43 (1 day ago)	Login credentials theft attempt	Hacking
🇺🇸 TPI-Abuse	2026-07-16 06:37:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:37:19.967559 2026] [security2:error] [pid 22823:tid 22823] [client 193.42.99.102:17030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nnrentacar.com"] [uri "/.git/HEAD"] [unique_id "alh8H_wuSbjcOUsYQ6yUWAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 05:00:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.42.99.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:59:57.116883 2026] [security2:error] [pid 30429:tid 30429] [client 193.42.99.102:63132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/.git/HEAD"] [unique_id "alhlTRp8dgV31YB7KTqjhQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Moritz	2026-04-08 10:48:12 (3 months ago)	Honeypot hit: Unauthorized traffic on 21/ftpd	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.20

🇺🇸 193.202.16.237

🇺🇸 192.3.245.139

🇺🇸 172.253.251.118

🇺🇸 157.230.161.27

🇫🇮 147.185.133.29

🇺🇸 107.172.43.200

🇸🇬 34.143.199.89

🇺🇸 216.25.89.69

🇺🇿 213.230.127.104

🇹🇼 210.65.88.51

🇹🇬 196.171.112.245

🇵🇱 176.53.159.198

🇺🇸 161.153.33.79

🇦🇷 131.255.240.10

🇸🇬 101.47.159.125

🇮🇹 81.57.120.20

🇩🇪 51.195.39.149

🇺🇸 45.156.129.76

🇦🇿 37.114.177.19