JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.117.4

193.56.117.4 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 7%: ?

ISP	VPN Consumer Chicago, IL, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.117.4

Whois 193.56.117.4

IP Abuse Reports for 193.56.117.4:

This IP address has been reported a total of 87 times from 65 distinct sources. 193.56.117.4 was first reported on October 9th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-09-26 23:00:53 (1 month ago)	Email: Login failures from Bad Reputation IP: 193.56.117.4. Threat Score: 6.2/10 (MEDIUM). Confidenc ... show more Email: Login failures from Bad Reputation IP: 193.56.117.4. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-26 22:00:08 (1 month ago)	Email: Login failures from Bad Reputation IP: 193.56.117.4. Threat Score: 5.5/10 (MEDIUM). Reported ... show more Email: Login failures from Bad Reputation IP: 193.56.117.4. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇵🇱 axiomofchoice.xyz	2026-08-31 11:12:16 (1 month ago)	endlessh trap: attempts=4 total_time_stuck=80.103s	Port Scan SSH Hacking
🇨🇳 鹏鹏	2026-08-19 08:35:37 (2 months ago)	monitor: on VM-0-7-ubuntu \| port: 51230 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 51230 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 鹏鹏	2026-08-07 08:44:15 (2 months ago)	monitor: on VM-0-7-ubuntu \| port: 16031 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 16031 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 GabrielJST	2026-07-26 19:56:37 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 193.56.117.4 (US/United States/-)	Brute-Force
Anonymous	2026-07-26 04:30:18 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-07-26 00:18:06 (3 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇫🇷 matthieul.dev	2026-07-18 11:20:18 (3 months ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=25762	Port Scan Brute-Force
🇨🇳 鹏鹏	2026-07-12 14:31:17 (3 months ago)	monitor: on VM-0-7-ubuntu \| port: 10583 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 10583 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:39:02 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇺🇸 chronos	2024-04-20 16:20:55 (2 years ago)	[AUTORAVALT][[20/04/2024 - 13:20:55 -03:00 UTC] Attack from [193.56.117.4] Action: BLocKed Hacking. ... show more [AUTORAVALT][[20/04/2024 - 13:20:55 -03:00 UTC] Attack from [193.56.117.4] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇺🇸 chronos	2024-04-20 15:57:41 (2 years ago)	[AUTORAVALT][[20/04/2024 - 12:57:40 -03:00 UTC] Attack from [193.56.117.4] Action: BLocKed DDoS Att ... show more [AUTORAVALT][[20/04/2024 - 12:57:40 -03:00 UTC] Attack from [193.56.117.4] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe for or exploit install] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
Anonymous	2024-04-20 14:02:49 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
🇩🇪 Heathrxw	2024-04-20 04:53:55 (2 years ago)	193.56.117.4 - - [20/Apr/2024:06:53:54 +0200] "GET /.env.old HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Mac ... show more 193.56.117.4 - - [20/Apr/2024:06:53:54 +0200] "GET /.env.old HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 172.69.221.26

🇹🇼 172.69.221.25

🇧🇪 142.250.32.4

🇨🇳 123.187.244.19

🇮🇳 103.74.70.44

🇳🇱 45.148.10.141

🇨🇦 15.235.96.37

🇨🇭 209.99.190.186

🇨🇳 180.76.60.83

🇹🇭 61.19.246.157

🇺🇸 57.141.0.10

🇮🇱 34.165.95.7

🇧🇪 34.156.206.32

🇺🇸 20.65.178.121

🇳🇱 200.138.46.190

🇧🇪 198.235.24.215

🇵🇱 194.180.49.68

🇷🇴 193.46.255.86

🇵🇪 179.6.169.16

🇺🇸 167.71.24.92