JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.20.247

193.56.20.247 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.20.247

Whois 193.56.20.247

IP Abuse Reports for 193.56.20.247:

This IP address has been reported a total of 10 times from 8 distinct sources. 193.56.20.247 was first reported on March 14th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-29 14:57:52 (1 month ago)	(mod_security) mod_security (id:900178) triggered by 193.56.20.247 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900178) triggered by 193.56.20.247 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇬🇧 catalink.com	2026-03-21 07:48:43 (3 months ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 04:10:46 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 193.56.20.247 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 193.56.20.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 00:10:38.644393 2026] [security2:error] [pid 24015:tid 24015] [client 193.56.20.247:58493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|runnercomics.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "runnercomics.com"] [uri "/"] [unique_id "abjUPrQx8QJzqoRVYJagJAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-19 00:24:11 (4 months ago)	GlobalProtect Password Spraying	Brute-Force
🇺🇸 TPI-Abuse	2025-12-03 09:20:46 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 193.56.20.247 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 193.56.20.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 04:20:40.471684 2025] [security2:error] [pid 5939:tid 5939] [client 193.56.20.247:50105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|labelrecord.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "labelrecord.com"] [uri "/"] [unique_id "aTAA6Egu-SSngPTj8lZSAAAAABc"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-08-30 16:51:08 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.247 2025-08-30T17:21:25+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.247 2025-08-30T17:21:25+02:00 vpn Access-Reject 'scanner' station: 193.56.20.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-08-18 18:21:51 (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.247 2025-08-18T19:56:12+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 193.56.20.247 2025-08-18T19:56:12+02:00 vpn Access-Reject 'cwhite' station: 193.56.20.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-01-19 14:13:38 (1 year ago)	sql injection	Web App Attack
🇨🇦 wil.com	2024-09-25 03:02:59 (1 year ago)	GlobalProtect login attempts with user tperez.	VPN IP Brute-Force
🇸🇪 maxxsense	2024-03-14 06:01:31 (2 years ago)	(wordpress) Failed wordpress login from 193.56.20.247 (CN/China/-)	Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 192.141.121.88

🇨🇴 152.200.181.42

🇹🇼 101.13.2.183

🇳🇱 45.148.10.151

🇩🇪 213.209.159.225

🇺🇸 213.201.253.150

🇺🇸 195.184.76.67

🇧🇷 177.86.10.245

🇺🇸 138.197.97.170

🇫🇷 84.247.134.22

🇲🇦 81.192.46.45

🇺🇸 65.111.9.54

🇯🇵 8.211.172.246

🇺🇸 2a03:2880:f800:3c::

🇧🇷 187.111.201.186

🇺🇸 162.216.150.84

🇻🇳 125.212.217.143

🇨🇳 115.190.138.163

🇨🇳 101.89.141.184

🇱🇹 81.30.98.144