JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.28.144

193.56.28.144 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 28%: ?

28%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.28.144

Whois 193.56.28.144

IP Abuse Reports for 193.56.28.144:

This IP address has been reported a total of 90 times from 26 distinct sources. 193.56.28.144 was first reported on December 3rd 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-09-21 19:17:25 (1 day ago)	CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,	Brute-Force
🇸🇪 nekopavel	2026-09-16 16:10:50 (6 days ago)	193.56.28.144 - - [16/Sep/2026:18:10:48 +0200]"GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 4153" ... show more 193.56.28.144 - - [16/Sep/2026:18:10:48 +0200]"GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 4153"-" pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36""0.246" "-""Ashburn" "US" 193.56.28.144 - - [16/Sep/2026:18:10:48 +0200]"GET //xmlrpc.php?rsd HTTP/1.1" 404 548"-" pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36""0.260" "-""Ashburn" "US" 193.56.28.144 - - [16/Sep/2026:18:10:49 +0200]"GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 4153"-" pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36""0.246" "-""Ashburn" "US" ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-11 01:16:17 (1 week ago)	Web App Attack	Web App Attack
🇸🇪 OnTheEdge	2026-09-04 06:18:37 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2026-09-02 17:52:27 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇪🇸 librebit	2026-08-10 06:18:12 (1 month ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-08-01 00:18:18 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 pltcldvlpr	2026-05-16 00:38:00 (4 months ago)	CMS/framework probe: 193.56.28.144 - - [16/May/2026:02:38:00 +0200] "GET http://analytics.netznarbe. ... show more CMS/framework probe: 193.56.28.144 - - [16/May/2026:02:38:00 +0200] "GET http://analytics.netznarbe.de/.git/HEAD HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" asn=200373 org="3xK Tech GmbH" country=US ... show less	Web App Attack
🇩🇪 LRob	2026-05-13 22:15:05 (4 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-04-26 16:53:36 (4 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-04-21 02:42:55 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-42.193.56.28.144.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-42.193.56.28.144.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-10 20:00:08 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-00.193.56.28.144.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-00.193.56.28.144.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:37:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:37:37.832780 2026] [security2:error] [pid 14588:tid 14588] [client 193.56.28.144:12333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reparcol.es"] [uri "/admin/.env"] [unique_id "aZUl8QhGYpDIp5yMYpsvhAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-02-18 02:00:05 (7 months ago)	Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-sensitive-fil ... show more Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-sensitive-files show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 01:08:57 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:08:49.922291 2026] [security2:error] [pid 1518635:tid 1518635] [client 193.56.28.144:23217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peazy.net"] [uri "/api/.env"] [unique_id "aZURIUYJhJr0MDGT_BGDlQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 156.229.21.54

🇧🇬 78.128.114.162

🇧🇷 45.205.1.163

🇸🇬 43.133.61.254

🇫🇮 5.61.90.217

🇵🇰 202.47.48.97

🇦🇷 190.220.172.154

🇵🇱 172.64.200.41

🇧🇩 138.252.113.224

🇩🇪 104.248.132.98

🇺🇸 99.29.106.25

🇺🇸 40.124.122.193

🇮🇳 20.244.17.248

🇮🇳 20.40.44.6

🇧🇷 186.239.41.74

🇩🇪 181.41.194.232

🇹🇷 176.88.148.240

🇬🇧 154.16.44.217

🇺🇸 104.228.154.40

🇩🇿 41.111.227.10