JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.202.80.237

Recent Activity

Abuse Confidence Score

22% Elevated

19 reports

11 reporters · latest 1 hour ago

ISP: FINE GROUP SERVERS SOLUTIONS LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26548
Domain Name: finegroupservers.com
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 11 distinct reporters

First reported

December 7th 2020

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1

Most common categories Bad Web Bot 6 Brute-Force 4 Web App Attack 4 Exploited Host 2 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-15 17:56:02 UTC · (1 hour ago)	(mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:55:56.033543 2026] [security2:error] [pid 26577:tid 26577] [client 193.202.80.237:38141] ... show more (mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:55:56.033543 2026] [security2:error] [pid 26577:tid 26577] [client 193.202.80.237:38141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|borzoi-pedigree.batw.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/p/PrinceIgorofRomanoffr.html"] [unique_id "avnyLHYgBFDx3MoMbBBgGQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-14 09:46:12 UTC · (1 day ago)	(mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:46:05.640843 2026] [security2:error] [pid 31782:tid 31782] [client 193.202.80.237:57453] ... show more (mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:46:05.640843 2026] [security2:error] [pid 31782:tid 31782] [client 193.202.80.237:57453] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.glendaleheritage.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/about-glendale-the-living-village-video/"] [unique_id "avgt3RO1wbI98qjac99gJQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-12 04:24:27 UTC · (3 days ago)	(mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:24:18.547068 2026] [security2:error] [pid 11575:tid 11575] [client 193.202.80.237:26895] ... show more (mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:24:18.547068 2026] [security2:error] [pid 11575:tid 11575] [client 193.202.80.237:26895] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.thegoldentether.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thegoldentether.com"] [uri "/js/en-nz.js"] [unique_id "avU_comJJwovEFKON-CCuQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Zandro	2026-11-10 12:00:14 UTC · (5 days ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-11-03 01:17:48 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:17:41.840637 2026] [security2:error] [pid 7168:tid 7168] [client 193.202.80.237:34049] M ... show more (mod_security) mod_security (id:210350) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:17:41.840637 2026] [security2:error] [pid 7168:tid 7168] [client 193.202.80.237:34049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.partybusdet.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.partybusdet.com"] [uri "/about-party-bus-det.html"] [unique_id "auk2NTtQzPaC69D1E_DpOwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-28 19:59:22 UTC · (2 weeks ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp	Exploited Host Bad Web Bot
🇨🇿 Countryman	2026-09-12 00:10:01 UTC · (2 months ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-10 01:51:37 UTC · (2 months ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 193.202.80.237 2026-09-10T02:23:12+02:00 vpn Access-Reject 'krjo' station: 193.202.80.237 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 193.202.80.237 2026-09-10T02:23:12+02:00 vpn Access-Reject 'krjo' station: 193.202.80.237 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-10T02:24:32+02:00 vpn Access-Reject 'knkl' station: 193.202.80.237 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-10T02:25:52+02:00 vpn Access-Reject 'krno' station: 193.202.80.237 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-09 00:49:44 UTC · (2 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2026-09-08 01:05:27 UTC · (2 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 19:50:23 UTC · (5 months ago)	(mod_security) mod_security (id:225170) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:50:16.944213 2026] [security2:error] [pid 26271:tid 26273] [client 193.202.80.237:59909] ... show more (mod_security) mod_security (id:225170) triggered by 193.202.80.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:50:16.944213 2026] [security2:error] [pid 26271:tid 26273] [client 193.202.80.237:59909] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|laradioactivitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laradioactivitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai20eEwTr8LaMrBWUc2pawAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-28 15:04:50 UTC · (1 year ago)	This IP was involved in an brute force and password spray attack on 2025/03/28 08:24:18	Port Scan Brute-Force Exploited Host Web App Attack
🇨🇦 wil.com	2025-03-28 08:35:01 UTC · (1 year ago)	GlobalProtect login attempts with user NATALIES.	VPN IP Brute-Force
🇺🇸 Anonymous	2025-02-28 16:00:00 UTC · (1 year ago)	Brute force attack detected from 193.202.80.237	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 UTC · (1 year ago)	Brute force attack detected from 193.202.80.237	DDoS Attack Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 167.71.197.86

🇫🇷 109.208.196.72

🇨🇭 104.244.73.42

🇫🇷 82.229.108.43

🇺🇸 73.93.129.191

🇩🇪 172.71.172.119

🇳🇱 45.148.10.152

🇨🇳 14.103.111.16

🇵🇱 188.212.135.93

🇺🇸 173.239.224.155

🇺🇸 162.216.150.215

🇳🇱 159.223.235.213

🇫🇮 147.185.133.176

🇫🇮 147.185.133.151

🇫🇮 147.185.133.16

🇳🇱 80.82.65.50

🇳🇱 35.214.170.86

🇦🇷 190.191.82.80

🇸🇮 176.65.134.50

🇺🇸 49.51.72.76