JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.28.124

193.56.28.124 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.28.124

Whois 193.56.28.124

IP Abuse Reports for 193.56.28.124:

This IP address has been reported a total of 41 times from 19 distinct sources. 193.56.28.124 was first reported on December 2nd 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-07-05 19:56:03 (1 week ago)	Wordfence waf block on baystatereentrynetwork	Web App Attack
🇫🇷 Hippoline	2026-07-04 23:20:02 (1 week ago)	Jul 5 01:20:02 local wp(XXXX-B)[8126]: Authentication attempt for unknown user admin from 193.56.28 ... show more Jul 5 01:20:02 local wp(XXXX-B)[8126]: Authentication attempt for unknown user admin from 193.56.28.124 ... show less	Brute-Force Web App Attack
🇭🇺 bcsaba	2026-07-04 20:44:26 (1 week ago)	CMS (WordPress or Joomla) login attempt. 193.56.28.124 - - [04/Jul/2026:22:44:24 +0200] "POST /wp-lo ... show more CMS (WordPress or Joomla) login attempt. 193.56.28.124 - - [04/Jul/2026:22:44:24 +0200] "POST /wp-login.php HTTP/1.1" 200 3521 "https://REDACTED/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Hacking Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-07-04 19:29:13 (1 week ago)	(wordpress) Failed wordpress login from 193.56.28.124 (US/United States/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-07-04 02:15:58 (1 week ago)	Web attack blocked by Wordfence on www.charlesquaedvlieg.nl (1 hit). Reported by CRMON.	Web App Attack
🇪🇸 librebit	2026-06-24 03:22:07 (2 weeks ago)	Brute force	Brute-Force
🇮🇹 VHosting	2025-12-23 14:40:27 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 rsa	2025-11-26 22:02:00 (7 months ago)	GET /.aws/credentials HTTP/1.1	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 21:32:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:32:05.428197 2025] [security2:error] [pid 24867:tid 24867] [client 193.56.28.124:39451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "admin.turedinmobiliaria.com"] [uri "/.env"] [unique_id "aSdx1afzC2_h1hMwgLdK4QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:19:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:19:45.515005 2025] [security2:error] [pid 2027408:tid 2027424] [client 193.56.28.124:22125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.theyogicat.com"] [uri "/.env"] [unique_id "aSVYkX0JlhnQTGLFtsgmRwAAAMo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:08:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:08:23.697046 2025] [security2:error] [pid 13981:tid 13981] [client 193.56.28.124:52537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crowmoonmarketing.com"] [uri "/.git/HEAD"] [unique_id "aSUPl5R13Sy7JCM5NwTE1QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-01 06:28:15 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-28 22:54:15 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-26 10:46:20 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-23 23:09:21 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.23 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.23 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.164

🇧🇷 205.210.31.177

🇺🇸 172.239.51.109

🇭🇰 156.225.1.96

🇮🇳 128.185.209.30

🇮🇳 117.193.74.14

🇺🇸 104.236.93.174

🇸🇬 103.189.234.85

🇧🇩 103.131.144.53

🇫🇷 91.196.152.183

🇺🇸 66.132.172.201

🇺🇸 64.62.197.23

🇺🇸 2604:a880:400:d1:0:4:6c7b:f001

🇨🇳 220.197.85.134

🇨🇳 218.17.113.148

🇺🇸 216.10.11.59

🇰🇷 211.232.210.228

🇧🇷 205.210.31.175

🇧🇷 205.210.31.145

🇭🇰 199.45.155.94