JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.202.28.13

144.202.28.13 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 99%: ?

99%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	144.202.28.13.vultrusercontent.com
Domain Name	vultr.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.202.28.13

Whois 144.202.28.13

IP Abuse Reports for 144.202.28.13:

This IP address has been reported a total of 30 times from 20 distinct sources. 144.202.28.13 was first reported on June 10th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-09-16 05:58:43 (12 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇺🇸 OceanTreasure	2026-09-16 05:36:31 (12 hours ago)	tcp/443; Git configuration exposure attempt: "GET /.git/config" @ 2026-09-16T05:36:31Z [proxy]	Web App Attack
Anonymous	2026-09-16 04:00:02 (14 hours ago)	suspicious request in access.log	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-15 22:01:11 (20 hours ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
🇩🇪 Jochen Pretli	2026-09-15 21:41:51 (20 hours ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 TPI-Abuse	2026-09-15 20:58:29 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:58:26.228218 2026] [security2:error] [pid 31369:tid 31369] [client 144.202.28.13:49160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.techsuite7.net"] [uri "/.git/config"] [unique_id "aqmxchp8WcZurG93BKQRUwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:42:19 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:42:11.800592 2026] [security2:error] [pid 20205:tid 20205] [client 144.202.28.13:54990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.timetemple.org"] [uri "/.git/config"] [unique_id "aqmto8s4O1wJGD2V3a6ftAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:07:24 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:07:18.467154 2026] [security2:error] [pid 4043:tid 4043] [client 144.202.28.13:33908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.photo-craft.org"] [uri "/.git/config"] [unique_id "aqmldqAZNvHEuidq7KFxpwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 19:59:43 (22 hours ago)	[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 144.202.28.13 - - [15/Sep/2026:21:59:42 +0200] "GET /.git/config HTTP/1.1" 301 6328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:39:47 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:39:41.194285 2026] [security2:error] [pid 26068:tid 26068] [client 144.202.28.13:54850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.scoutmountaindistrict.org"] [uri "/.git/config"] [unique_id "aqme_YS0M0SZarX44kk4ngAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:13:39 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:13:31.659976 2026] [security2:error] [pid 5163:tid 5163] [client 144.202.28.13:53356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariakhalitov.com"] [uri "/.git/config"] [unique_id "aqmY2y9rD_5_Qy7SN1YR5wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-15 18:54:23 (23 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 17:22:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:22:19.591346 2026] [security2:error] [pid 22932:tid 22932] [client 144.202.28.13:52686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.greenroomonline.org"] [uri "/.git/config"] [unique_id "aql-y43VwY45or8nEZsCqgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 17:05:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 144.202.28.13 (144.202.28.13.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:05:22.139631 2026] [security2:error] [pid 31956:tid 31956] [client 144.202.28.13:35458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.greatplainswingcaf.org"] [uri "/.git/config"] [unique_id "aql60oQmtBTt3aY8p_rqjwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-09-15 11:39:18 (1 day ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-15 11:39 UTC show less	Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 110.166.67.189

🇺🇿 84.54.71.164

🇺🇸 20.221.57.164

🇦🇷 186.19.80.249

🇮🇳 161.248.37.160

🇭🇰 47.238.76.165

🇳🇱 45.148.10.21

🇹🇼 35.194.168.135

🇯🇵 34.97.0.191

🇷🇴 2.57.122.13

🇦🇺 220.235.237.36

🇱🇻 185.75.238.27

🇨🇱 181.163.50.217

🇨🇦 176.113.74.92

🇺🇸 91.230.168.188

🇷🇺 81.211.72.167

🇺🇸 34.106.207.205

🇧🇪 34.38.78.4

🇷🇺 5.44.168.134

🇦🇷 190.99.71.101