JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.202.16.206

Activity Trending Down

Abuse Confidence Score

22% Elevated

51 reports

35 reporters · latest 3 weeks ago

ISP: FINE GROUP SERVERS SOLUTIONS LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26548
Domain Name: finegroupservers.com
Country: 🇺🇸 United States of America
City: Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

51 from 35 distinct reporters

First reported

March 21st 2024

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇮🇹 Italy 2 🇺🇸 United States of America 2

Most common categories Web App Attack 8 Bad Web Bot 3 Hacking 2 Exploited Host 2 Brute-Force 2

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-15 13:36:24 UTC · (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 193.202.16.206 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:36:17.744452 2026] [security2:error] [pid 13811:tid 13811] [client 193.202.16.206:25775] ... show more (mod_security) mod_security (id:210350) triggered by 193.202.16.206 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:36:17.744452 2026] [security2:error] [pid 13811:tid 13811] [client 193.202.16.206:25775] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|female.bodybuildbid.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "female.bodybuildbid.com"] [uri "/training/ester.html"] [unique_id "atDW0SaPbvl9pUcB-6VgsQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 marc	2026-10-05 23:59:00 UTC · (1 month ago)	Hacking web forms for spam	Web App Attack Web Spam Hacking
🇮🇹 Progetto1	2026-09-27 16:35:03 UTC · (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 london2038.com	2026-09-23 03:43:04 UTC · (1 month ago)	Malformed or malicious web request 193.202.16.206 - - [23/Sep/2026:05:43:03 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "Apache-HttpClient/4.5.13 (Java/11.0.32)"	Hacking Web App Attack
🇷🇸 pexodelic	2026-09-23 03:35:02 UTC · (1 month ago)	Automated report from web, SSH and FTP server logs: 6 requests probing for exposed secrets (.env, .git, config files). First reported 2026-09-23 00:05 UTC, last reported 2026-09-23 05:35 UTC; counts cover the current log rotation window.	Web App Attack
🇩🇪 FeG Deutschland	2026-09-18 10:16:00 UTC · (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇮🇹 CoreTech srl	2026-09-18 08:03:58 UTC · (1 month ago)	cloudlinux2 fail2ban: 2026-09-18 09:58:53,958 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.135.2.189 - 2026-09-18 09:58:51cloudlinux2 fail2ban: 2026-09-18 09:59:04,034 fail2ban.filter [1813]: INFO [plesk-wordpress] Fo ... show more cloudlinux2 fail2ban: 2026-09-18 09:58:53,958 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.135.2.189 - 2026-09-18 09:58:51cloudlinux2 fail2ban: 2026-09-18 09:59:04,034 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 199.96.165.35 - 2026-09-18 09:59:02cloudlinux2 fail2ban: 2026-09-18 09:59:15,206 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 199.96.165.95 - 2026-09-18 09:59:14cloudlinux2 fail2ban: 2026-09-18 09:59:22,409 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.135.2.98 - 2026-09-18 09:59:20cloudlinux2 fail2ban: 2026-09-18 09:59:26,914 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 138.197.151.8 - 2026-09-18 09:59:24cloudlinux2 fail2ban: 2026-09-18 09:59:30,372 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 162.252.55.121 - 2026-09-18 09:59:28cloudlinux2 fail2ban: 2026-09-18 09:59:42,729 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 155.212.37.153 - 2026-09-18 09:59:40cloudlinux show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 22:30:45 UTC · (1 month ago)	(mod_security) mod_security (id:225170) triggered by 193.202.16.206 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:30:42.338424 2026] [security2:error] [pid 15850:tid 15850] [client 193.202.16.206:34863] ... show more (mod_security) mod_security (id:225170) triggered by 193.202.16.206 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:30:42.338424 2026] [security2:error] [pid 15850:tid 15850] [client 193.202.16.206:34863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rendermatrix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rendermatrix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqnHEgs6pslRynjeW-3s7AAAABg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-09-02 04:40:19 UTC · (2 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 ph	2026-08-26 08:28:56 UTC · (2 months ago)	Bad web bot attempting to run wp-json on non-WP site	Hacking Bad Web Bot Web App Attack
🇮🇩 bps-statistics	2026-08-25 18:49:47 UTC · (2 months ago)	WP Login Scan Activities: "2026-08-26T01:49:47.342+07:00" "/wp-login.php" "193.202.16.206" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"	Web App Attack
🇧🇪 voormedia	2026-08-16 01:15:18 UTC · (2 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇩🇪 C C	2026-08-11 01:38:49 UTC · (3 months ago)	Distributed scraping attack: 1386 req from 1271 rotating proxy IPs \| this IP: 1 req	Open Proxy Bad Web Bot Web App Attack
🇮🇩 bps-statistics	2026-08-09 10:28:43 UTC · (3 months ago)	WP Login Scan Activities: "2026-08-09T17:28:43.985+07:00" "/wp-login.php" "193.202.16.206" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"	Web App Attack
🇫🇷 Baking333	2026-08-06 15:28:04 UTC · (3 months ago)	[redacted] 193.202.16.206 - - [06/Aug/2026:16:27:59 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/428460 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 193.202.16 ... show more [redacted] 193.202.16.206 - - [06/Aug/2026:16:27:59 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/428460 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 193.202.16.206 - - [06/Aug/2026:16:28:02 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/94459 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.215.131.154

🇺🇸 199.165.159.96

🇮🇳 168.144.68.101

🇧🇩 103.159.2.113

🇸🇪 93.164.134.141

🇺🇸 65.49.1.205

🇨🇳 36.7.90.98

🇮🇳 35.244.32.167

🇺🇸 3.83.245.221

🇰🇷 220.116.117.213

🇵🇱 195.3.220.7

🇰🇷 180.182.234.20

🇨🇳 116.179.32.196

🇳🇱 109.160.32.105

🇳🇱 77.67.26.207

🇺🇸 70.175.182.44

🇺🇸 67.1.249.171

🇫🇷 51.75.253.68

🇺🇸 35.169.206.177

🇺🇸 20.83.59.210