JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.28.12

193.56.28.12 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.28.12

Whois 193.56.28.12

IP Abuse Reports for 193.56.28.12:

This IP address has been reported a total of 39 times from 19 distinct sources. 193.56.28.12 was first reported on December 10th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-05-24 02:29:59 (2 weeks ago)	Form spam	Web Spam
🇺🇸 oncord	2026-05-13 02:15:44 (4 weeks ago)	Form spam	Web Spam
🇬🇧 PeravixGroup	2026-05-08 22:50:24 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-02-24 08:13:54 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 03:13:48.015920 2026] [security2:error] [pid 2330:tid 2330] [client 193.56.28.12:11507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "attention-deficit-hyperactivity.disabilitiesdespair.com"] [uri "/.git/config"] [unique_id "aZ1dvAtcDg7iYlnFEPi13wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 22:11:28 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 17:11:22.518276 2026] [security2:error] [pid 18606:tid 18606] [client 193.56.28.12:17047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobstercrmbeta.modernsalessolutions.com"] [uri "/.git/config"] [unique_id "aZzQisNAqqNU8we1ukyBgAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 09:24:59 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 04:24:52.387526 2026] [security2:error] [pid 7450:tid 7450] [client 193.56.28.12:13699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ancientleather.theflyingdutchman.us"] [uri "/.git/config"] [unique_id "aZwc5ET44ujNkb_MOYOuXwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-13 11:55:34 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-29 05:22:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:22:17.086881 2025] [security2:error] [pid 894:tid 894] [client 193.56.28.12:13905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matchstic-branding.com"] [uri "/.git/HEAD"] [unique_id "aVIQCVIvrubnaAW_8rRkPgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:51:34 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:51:25.501579 2025] [security2:error] [pid 2200:tid 2200] [client 193.56.28.12:42047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxurymicrobikinis.com"] [uri "/.git/HEAD"] [unique_id "aVIIzXZhbrPCSWAQbzCLYAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-28 22:02:40 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-27 22:07:20 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.27 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-22 16:07:54 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.22 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-19 12:19:55 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 18:44:45 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-15 23:42:02 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.15 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.15 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇲🇦 196.127.168.140

🇬🇧 193.163.125.174

🇵🇰 182.180.154.234

🇺🇸 162.216.149.190

🇩🇪 144.31.140.121

🇮🇳 117.254.32.33

🇳🇱 77.83.39.107

🇺🇸 67.167.25.124

🇩🇪 43.228.157.10

🇮🇷 37.156.120.78

🇹🇼 35.201.244.45

🇧🇷 34.95.214.111

🇮🇳 223.225.107.116

🇩🇪 213.209.159.231

🇺🇸 198.11.178.150

🇰🇷 175.118.127.138

🇦🇺 158.178.141.16

🇺🇸 137.184.153.87

🇰🇷 112.219.151.50