JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.20.238

193.56.20.238

Activity Trending Down

19 reports found in our database

14% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

FINE GROUP SERVERS SOLUTIONS LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS26548

Domain Name

finegroupservers.com

Country

🇺🇸 United States of America

City

Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 193.56.20.238:

This IP address has been reported a total of 19 times from 13 distinct sources. 193.56.20.238 was first reported on April 11th 2024, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: Germany with 1 report; Finland with 1 report; Indonesia with 1 report. The most common categories in these recent reports were: Web App Attack 3 times; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-18 18:00:43 (3 weeks ago)	WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ... show more WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇮🇩 bps-statistics	2026-08-13 12:37:06 (3 weeks ago)	WP Login Scan Activities: "2026-08-13T19:37:06.873+07:00" "/wp-login.php" "193.56.20.238" "Mozilla/5 ... show more WP Login Scan Activities: "2026-08-13T19:37:06.873+07:00" "/wp-login.php" "193.56.20.238" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇮 JimArchon72	2026-07-29 00:30:04 (1 month ago)	2026/07/29 00:26:26 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 20:34:04 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:33:58.390834 2025] [security2:error] [pid 21824:tid 21824] [client 193.56.20.238:46387] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Capital Club II/Thumbs.db"] [unique_id "aLyatkNrwU85Q6Ql1KYFsgAAAAY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Capital%20Club%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-08-24 12:14:49 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2025-08-20 17:36:09 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2025-08-15 05:59:08 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2025-08-13 23:39:39 (1 year ago)	Form spam	Web Spam
🇨🇭 backslash	2025-06-19 15:00:15 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2025-04-29 03:30:53 (1 year ago)	xmlrpc attack blocked attempt from fail2ban ...	Web App Attack
🇺🇸 TPI-Abuse	2025-03-05 10:01:08 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 05:00:32.591279 2025] [security2:error] [pid 34910:tid 34910] [client 193.56.20.238:20745] [client 193.56.20.238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill II Recliner/Thumbs.db"] [unique_id "Z8ggwKru4RDD02a-yFMHcAAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%20II%20Recliner/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-01-15 00:57:49 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.56.20.238 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.56.20.238 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇷🇸 Smel	2024-11-05 08:22:08 (1 year ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
Anonymous	2024-09-23 19:54:22 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇬🇧 essinghigh	2024-06-15 05:04:11 (2 years ago)	1718427848 # Service_probe # SIGNATURE_SEND # source_ip:193.56.20.238 # dst_port:5607 ...	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇿 197.249.241.37

🇩🇪 213.209.159.26

🇧🇬 213.91.182.247

🇺🇸 195.184.76.60

🇷🇺 188.247.54.50

🇺🇸 147.185.132.231

🇨🇳 119.84.164.57

🇨🇳 110.166.87.119

🇺🇸 92.204.128.28

🇳🇱 91.92.241.196

🇫🇷 85.217.140.1

🇺🇸 66.132.186.239

🇩🇪 51.68.163.208

🇳🇱 45.92.1.63

🇬🇧 31.14.254.75

🇷🇺 5.228.1.56

🇮🇳 220.158.184.112

🇧🇷 189.125.111.177

🇧🇷 177.10.203.106

🇮🇳 117.221.141.190