JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.20.195

193.56.20.195 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 1%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.20.195

Whois 193.56.20.195

IP Abuse Reports for 193.56.20.195:

This IP address has been reported a total of 23 times from 20 distinct sources. 193.56.20.195 was first reported on July 22nd 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-29 19:29:05 (4 weeks ago)	(mod_security) mod_security (id:900177) triggered by 193.56.20.195 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900177) triggered by 193.56.20.195 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇫🇷 tilellit.pro	2026-02-14 00:04:30 (4 months ago)	Fail2Ban banned 193.56.20.195 for security violations in jail wp-armour. Log: 2026/02/14 00:04:30 [e ... show more Fail2Ban banned 193.56.20.195 for security violations in jail wp-armour. Log: 2026/02/14 00:04:30 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.56.20.195 \| Target: wplogin" , client: 193.56.20.195, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2026-01-26 11:26:04 (5 months ago)	wordpress-trap	Web App Attack
Anonymous	2026-01-26 00:01:37 (5 months ago)	"GET /wp-login.php HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-01-24 18:04:34 (5 months ago)	2026-01-24T20:04:34.232863+02:00 zanati wp(www.sahpa.co.za)[195437]: Blocked authentication attempt ... show more 2026-01-24T20:04:34.232863+02:00 zanati wp(www.sahpa.co.za)[195437]: Blocked authentication attempt for [email protected] from 193.56.20.195 ... show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-29 02:33:33 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 HandyTreff.de	2025-11-08 09:25:15 (7 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -19.613 (Bad < -10 / Very Bad < -20) ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -19.613 (Bad < -10 / Very Bad < -20) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3664.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 20:36:48 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.195 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:36:42.075753 2025] [security2:error] [pid 31940:tid 31940] [client 193.56.20.195:11495] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bourne/Thumbs.db"] [unique_id "aLybWvWrdLfTDdtL7J_6CwAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bourne/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 00:15:08 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-06 05:17:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.195 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:17:13.880735 2025] [security2:error] [pid 615094:tid 615094] [client 193.56.20.195:58209] [client 193.56.20.195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Chaps Saddle/originals/Thumbs.db"] [unique_id "aBmbWVU2kZzLg57P74_1lAAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/Chaps%20Saddle/originals/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-08 16:08:08 (1 year ago)	193.56.20.195 - - [08/Jan/2025:17:08:07 +0100] "POST / HTTP/1.1" 403 385 "-" "Mozilla/5.0 (Windows N ... show more 193.56.20.195 - - [08/Jan/2025:17:08:07 +0100] "POST / HTTP/1.1" 403 385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Mozilla/5.0 SV1" ... show less	Web App Attack
Anonymous	2024-12-18 00:59:42 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
🇺🇸 ChamberofCommerce.com	2024-08-13 18:55:50 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2024-06-15 23:59:00 (2 years ago)	"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"	Web App Attack
🇨🇭 backslash	2024-05-15 16:45:06 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 179.1.234.136

🇨🇦 129.222.137.141

🇺🇸 86.111.187.163

🇺🇸 38.96.178.216

🇮🇳 223.181.11.55

🇲🇽 186.96.158.180

🇬🇧 185.247.137.83

🇨🇴 181.237.35.59

🇦🇷 149.50.147.126

🇫🇷 95.111.234.72

🇺🇸 45.130.83.62

🇻🇳 14.225.7.70

🇮🇪 4.207.145.86

🇬🇧 2a06:4880:8000::b1

🇮🇳 2401:d9e0:6:5e14:38cf:431b:8e95:bad2

🇳🇱 185.223.235.40

🇹🇼 101.13.4.124

🇩🇪 94.16.17.140

🇮🇳 66.116.205.238

🇷🇺 46.191.197.143