JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.28.11

193.56.28.11 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.28.11

Whois 193.56.28.11

IP Abuse Reports for 193.56.28.11:

This IP address has been reported a total of 66 times from 33 distinct sources. 193.56.28.11 was first reported on December 19th 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-04 19:09:36 (2 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇪🇸 librebit	2026-05-17 06:46:23 (3 weeks ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-05-11 09:12:00 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇬🇧 PeravixGroup	2026-05-09 09:34:19 (4 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 masterguru	2026-04-26 17:45:13 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-25 10:17:22 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-19 22:21:39 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-13 09:21:58 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 193.56.28.11 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-04-08 18:13:25 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-03-05 23:55:16 (3 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-03-03 05:02:40 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-02-18 21:10:52 (3 months ago)	Forum/form spam	Web Spam
🇳🇱 homeshowdomain.nl	2025-11-28 23:03:39 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-28	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-28 17:52:18 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 193.56.28.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 193.56.28.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:52:12.410766 2025] [security2:error] [pid 8472:tid 8472] [client 193.56.28.11:35171] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|americanacademyofteachersofsinging.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "americanacademyofteachersofsinging.org"] [uri "/database.sql"] [unique_id "aSnhTNtalfvqE8ap2I0_XwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 16:08:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 11:08:11.302342 2025] [security2:error] [pid 22769:tid 22769] [client 193.56.28.11:9345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "a1laha.com"] [uri "/wp-config.php"] [unique_id "aSnI64j9uQiaoO0OQ9Ms6gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.145.181.48

🇺🇸 209.87.169.162

🇩🇪 195.74.93.34

🇳🇱 195.26.87.217

🇬🇧 193.163.125.77

🇺🇸 185.198.240.179

🇮🇳 182.95.224.102

🇮🇩 157.15.67.253

🇵🇰 103.151.46.177

🇷🇴 92.118.39.236

🇺🇸 91.193.232.70

🇷🇴 80.94.92.171

🇰🇷 59.22.201.143

🇳🇱 45.148.10.183

🇺🇸 209.87.169.156

🇬🇧 193.163.125.38

🇺🇸 185.198.240.166

🇹🇯 185.177.0.246

🇺🇸 172.217.96.84

🇩🇪 167.94.146.32