JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.202.16.148

193.202.16.148 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 19%: ?

19%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.202.16.148

Whois 193.202.16.148

IP Abuse Reports for 193.202.16.148:

This IP address has been reported a total of 30 times from 17 distinct sources. 193.202.16.148 was first reported on April 7th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-01 04:06:05 (10 hours ago)	(mod_security) mod_security (id:225170) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:06:00.612123 2026] [security2:error] [pid 16439:tid 16439] [client 193.202.16.148:52435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grandriverhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grandriverhomes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akSSKKwYgC5At1yq6GyxzgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-15 09:54:33 (2 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.202.16.148 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.202.16.148 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-14 20:24:23 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:24:15.621632 2026] [security2:error] [pid 19866:tid 19866] [client 193.202.16.148:38181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|orientaltb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orientaltb.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8N7_anuOBBGOEt65yuXQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 14:00:23 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 10:00:15.168436 2026] [security2:error] [pid 15838:tid 15838] [client 193.202.16.148:29593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barecreationsaz.abilityengraving.com"] [uri "/wp-config.php.orig"] [unique_id "ahBhb9y-dNGu1L3w1H2IiAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:22:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:22:15.274100 2026] [security2:error] [pid 21499:tid 21499] [client 193.202.16.148:50945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kavahawaii.com.kh6jim.com"] [uri "/wp-config.php.orig"] [unique_id "ag3ftxF0s9tL6NvDrLB-HAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 13:00:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:00:40.553122 2026] [security2:error] [pid 20243:tid 20243] [client 193.202.16.148:38347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dixiegeek.cosentient.com"] [uri "/wp-config.php.orig"] [unique_id "ag2weDSUmNq7AoqzMu3y0AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-05-18 02:49:39 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-03-09 21:32:29 (3 months ago)	(sshd) Failed SSH login from 193.202.16.148 (US/United States/-)	Brute-Force SSH
🇩🇪 ps-center	2026-03-07 16:42:52 (3 months ago)	C1-W: Brutforce ssh Login	Brute-Force
🇺🇸 TPI-Abuse	2026-01-01 17:06:51 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 12:06:46.385636 2026] [security2:error] [pid 12258:tid 12258] [client 193.202.16.148:52065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.labcomputers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.labcomputers.com"] [uri "/"] [unique_id "aVapppaD5nQSoZFnh31KjQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2025-08-20 03:00:40 (10 months ago)	2025-08-20 @ 05:00:40 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇺🇸 nowyouknow	2025-07-19 10:12:38 (11 months ago)	(From [email protected]) We have hacked your website https://omgchiro.com and extracted your datab ... show more (From [email protected]) We have hacked your website https://omgchiro.com and extracted your databases. How did this happen? Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server. What does this mean? We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://omgchiro.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we used in the past to de-index show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-06-21 01:53:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 193.202.16.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 21:53:04.889875 2025] [security2:error] [pid 3082665:tid 3082665] [client 193.202.16.148:56427] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lectern II/Brighton Chocolate/Thumbs.db"] [unique_id "aFYQgKbHhWrZKlcZj9zBUQAAAAA"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lectern%20II/Brighton%20Chocolate/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 20:20:08 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 nowyouknow	2024-11-19 06:49:14 (1 year ago)	(From [email protected]) Boost Your Business with Shopify - Only $1/Month for 3 Months! T ... show more (From [email protected]) Boost Your Business with Shopify - Only $1/Month for 3 Months! Turn your ideas into reality with Shopify’s limited-time offer: Join for a free trial and get three months on Shopify for just $1/month on specific plans. It's the ideal opportunity to transition or kick off your online store without the upfront costs! Why Shopify? Shopify is a complete platform that lets you build, personalize, and control your online store effortlessly. Reach customers on different channels—via your site, social networks, or in-person. With Shopify, you can: - Quickly launch a beautiful online store - Sell everywhere: web, mobile, social media, and more - Manage inventory, payments, and fulfillment from any device Shopify handles software updates and maintenance, so you can concentrate on expanding your business. -- Get started for $1/month: https://bit.ly/shopify-free-promo Don’t let this opportunity pass to launch your dream business with Shopify’s amazing offer! show less	Phishing Web Spam

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇬 196.0.242.54

🇧🇷 187.73.199.45

🇧🇷 186.251.211.235

🇧🇷 177.30.64.65

🇳🇱 77.91.71.10

🇳🇱 45.148.10.152

🇧🇴 190.129.122.12

🇧🇷 177.16.244.39

🇮🇳 122.10.246.240

🇿🇲 102.23.122.235

🇳🇱 45.148.10.157

🇺🇸 34.55.97.43

🇨🇳 218.60.251.253

🇧🇷 191.232.233.136

🇵🇰 153.117.127.92

🇺🇸 144.31.35.59

🇻🇳 103.121.91.144

🇸🇮 102.220.160.26

🇺🇸 47.254.26.236

🇧🇪 45.128.133.202