JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.20.42

193.56.20.42 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 35%: ?

35%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.20.42

Whois 193.56.20.42

IP Abuse Reports for 193.56.20.42:

This IP address has been reported a total of 37 times from 24 distinct sources. 193.56.20.42 was first reported on December 2nd 2021, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-09-01 03:03:02 (12 hours ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-08-28 23:37:54 (3 days ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 SX Communications	2026-08-23 16:35:58 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 193.56.20.42: traffic from this add ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 193.56.20.42: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇮🇩 Burayot	2026-08-18 18:33:42 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.56.20.42 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.56.20.42 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 LRob	2026-08-18 17:25:39 (1 week ago)	WordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) \| req: /wp-json/wp/ ... show more WordPress REST-API user enumeration (probing CVE-2017-5487 to harvest usernames) \| req: /wp-json/wp/v2/users \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇬🇧 relianoid.com	2026-08-03 17:37:34 (4 weeks ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-07-23 05:35:30 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-07-23 00:39:29 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:39:24.802779 2026] [security2:error] [pid 1853412:tid 1853412] [client 193.56.20.42:53691] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Grissom-II/Thumbs.db"] [unique_id "amFivKkawHkvThmJkxvkDwAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Grissom-II/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-21 09:52:12 (1 month ago)	[redacted] 193.56.20.42 - - [21/Jul/2026:10:52:05 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/36568 ... show more [redacted] 193.56.20.42 - - [21/Jul/2026:10:52:05 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/36568 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 193.56.20.42 - - [21/Jul/2026:10:52:11 +0100] "GET /wp-admin HTTP/1.1" 302 1517 0/35637 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-14 04:49:57 (1 month ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇬🇧 Oakley	2026-07-12 10:09:06 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇫🇷 UnixPrime	2026-07-08 20:56:54 (1 month ago)	193.56.20.42 - - [08/Jul/2026:22:56:50 +0200] "GET /wp-login.php HTTP/1.1" 404 181 "https://www.goog ... show more 193.56.20.42 - - [08/Jul/2026:22:56:50 +0200] "GET /wp-login.php HTTP/1.1" 404 181 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 193.56.20.42 - - [08/Jul/2026:22:56:54 +0200] "GET /wp-login.php HTTP/1.1" 404 181 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 22:23:34 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 193.56.20.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 193.56.20.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:23:25.818376 2026] [security2:error] [pid 10849:tid 10849] [client 193.56.20.42:44385] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Barclay/Thumbs.db"] [unique_id "akg2XcvDZTL3HwZFDQsvRAAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Barclay/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ph	2026-07-01 17:35:38 (1 month ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-06-29 00:30:04 (2 months ago)	[Mon Jun 29 02:30:01.185963 2026] [proxy_fcgi:error] [pid 926469:tid 926548] [remote 193.56.20.42:0] ... show more [Mon Jun 29 02:30:01.185963 2026] [proxy_fcgi:error] [pid 926469:tid 926548] [remote 193.56.20.42:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Mon Jun 29 02:30:04.277933 2026] [proxy_fcgi:error] [pid 926469:tid 926574] [remote 193.56.20.42:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 207.254.29.22

🇳🇱 185.223.235.50

🇨🇳 82.156.162.176

🇺🇸 209.85.128.200

🇺🇸 192.3.252.195

🇺🇸 189.104.34.237

🇺🇸 189.104.34.198

🇺🇸 189.104.34.86

🇴🇲 185.108.158.115

🇺🇸 165.154.163.172

🇺🇸 163.47.134.124

🇺🇸 147.185.132.81

🇺🇸 132.196.80.210

🇧🇩 103.96.107.253

🇫🇷 91.231.89.151

🇳🇱 91.92.47.19

🇸🇪 83.233.33.193

🇮🇪 80.233.12.109

🇨🇩 41.79.235.38

🇺🇸 20.172.67.223