JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.20.204

193.56.20.204 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 14%: ?

14%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.20.204

Whois 193.56.20.204

IP Abuse Reports for 193.56.20.204:

This IP address has been reported a total of 34 times from 13 distinct sources. 193.56.20.204 was first reported on August 22nd 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 13:21:37 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:21:29.162283 2026] [security2:error] [pid 32264:tid 32264] [client 193.56.20.204:49021] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bernsteinip.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bernsteinip.com"] [uri "/"] [unique_id "aqvpWa3xz3YM-Gj9K63QCQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 04:30:33 (1 week ago)	WordPress HTTP Brute Force Login Attempt.	Brute-Force
🇺🇸 Psycho Solutions LLC	2026-01-01 00:13:20 (8 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/1/2026 12:13 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-27 10:06:17 (8 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 09:42:22 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 04:42:15.912958 2025] [security2:error] [pid 25904:tid 25904] [client 193.56.20.204:55497] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.twccsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.twccsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aU0G98ib0bRAe6iWwFm_HAAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-17 14:25:27 (9 months ago)	Forum/form spam	Web Spam
🇦🇺 oncord	2025-11-23 11:30:02 (9 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-11-19 17:41:35 (9 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-11-17 00:04:29 (10 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-11-09 16:10:50 (10 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-11-07 02:03:45 (10 months ago)	(From [email protected]) Hello, Your website is losing customers. Your visitors are frustr ... show more (From [email protected]) Hello, Your website is losing customers. Your visitors are frustrated. Scrolling. Searching. Leaving. Fix it — install a FREE AI voice/chat agent on your homepage. It answers questions. Books leads. Converts traffic. You pay $0 to start. If your website can’t talk, it’s already outdated. Get your free AI agent: https://www.olleh.ai Need help? Contact [email protected] Thanks, Mel Bergstrom Should you wish to stop getting any more correspondence from me, please fill the form at bit. ly/fillunsubform with your domain address (URL). Via Vipacco 86, Chester, CA, USA, 94615 show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-02 04:30:46 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 193.56.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 00:30:41.869716 2025] [security2:error] [pid 27785:tid 27785] [client 193.56.20.204:34523] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kimbrothersusa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kimbrothersusa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQbeceni_2x3sSpNsfYnoAAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-09-09 16:51:57 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.204 2025-09-09T17:28:51+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.204 2025-09-09T17:28:51+02:00 vpn Access-Reject 'test_user' station: 193.56.20.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇳🇱 exxos	2025-09-04 05:03:01 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇨🇿 lp	2025-08-28 18:23:47 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.204 2025-08-28T20:03:11+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.204 2025-08-28T20:03:11+02:00 vpn Access-Reject 'oracle' station: 193.56.20.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇲🇾 113.23.225.9

🇫🇷 91.196.152.194

🇧🇪 35.240.11.101

🇦🇺 34.40.145.110

🇻🇳 203.210.210.129

🇳🇱 195.178.110.228

🇳🇱 192.253.248.215

🇮🇹 188.152.238.126

🇧🇷 181.233.109.116

🇺🇸 152.163.164.221

🇧🇬 78.128.114.50

🇫🇮 46.62.209.187

🇸🇬 45.78.235.121

🇬🇧 35.203.210.192

🇨🇴 190.60.62.98

🇳🇱 185.226.197.39

🇺🇸 173.239.224.151

🇿🇦 105.186.176.110

🇦🇲 87.241.158.229