JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.56.28.197

193.56.28.197 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.56.28.197

Whois 193.56.28.197

IP Abuse Reports for 193.56.28.197:

This IP address has been reported a total of 132 times from 9 distinct sources. 193.56.28.197 was first reported on November 23rd 2020, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-27 22:09:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:09:03.730737 2025] [security2:error] [pid 25118:tid 25118] [client 193.56.28.197:48433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingworksmassage.studio"] [uri "/.env"] [unique_id "aSjL_0kQY95KYpcauS-vrwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-27 11:13:53 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 07:46:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:02.725464 2025] [security2:error] [pid 12103:tid 12151] [client 193.56.28.197:14425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.strikeunosports.com"] [uri "/.git/HEAD"] [unique_id "aSQNOud3pxroRSWDTtpswAAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:57:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:57:17.445900 2025] [security2:error] [pid 3439104:tid 3439104] [client 193.56.28.197:26823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.airdeluxemusic.com"] [uri "/.git/HEAD"] [unique_id "aSQBzR9MwH6dkRREc73QbQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:30:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:58.974202 2025] [security2:error] [pid 15711:tid 15711] [client 193.56.28.197:36557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.saldesica.com"] [uri "/.env"] [unique_id "aSP7ZoNo5yulDsl7qm6hwQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:32:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:32:02.096817 2025] [security2:error] [pid 22571:tid 22571] [client 193.56.28.197:46989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ptr-medicalgroup.post-therapyreconditioning.com"] [uri "/.svn/wc.db"] [unique_id "aSPt0mL2QgxFXPS7GaMFrwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:42:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 193.56.28.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:05.115042 2025] [security2:error] [pid 17289:tid 17289] [client 193.56.28.197:56521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.orchestrateyouraptitudes.com"] [uri "/.env"] [unique_id "aSPiHZeFhp978cPod4t7gQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 18:53:35 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 00:46:25 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 techboy117	2025-11-14 00:16:07 (6 months ago)	Blocking due to password spraying.	Brute-Force
Anonymous	2025-11-13 04:40:55 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-08 17:49:00 (6 months ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.11.08 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 AWW-Admin	2025-10-29 15:28:21 (7 months ago)	(wordpress) Failed wordpress login from 193.56.28.197 (US/United States/-)	Brute-Force
🇨🇦 wil.com	2025-10-14 03:51:43 (7 months ago)	GlobalProtect login attempts with user kmelhus.	VPN IP Brute-Force
🇬🇧 D3monite	2025-10-08 15:34:24 (7 months ago)	Attempted Brute Force (cpaneld)	Brute-Force

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.108

🇧🇷 205.210.31.172

🇵🇪 200.107.163.195

🇳🇱 176.65.148.58

🇺🇸 156.239.253.250

🇨🇳 106.38.205.224

🇫🇷 91.231.89.8

🇺🇸 67.21.32.64

🇳🇱 45.148.10.157

🇧🇪 35.195.182.128

🇬🇧 5.181.124.131

🇷🇴 2.57.121.25

🇨🇳 219.135.211.110

🇨🇴 179.1.209.58

🇩🇪 165.232.125.188

🇺🇸 162.216.149.241

🇸🇬 142.91.102.187

🇮🇳 122.185.101.50

🇫🇷 91.231.89.181

🇨🇦 85.217.149.52