This IP address has been reported a total of
40
times from
32 distinct
sources.
168.144.64.28 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
United States of America
with 7
reports;
France
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
26
times;
Hacking
11
times;
Bad Web Bot
9
times;
Brute-Force
9
times;
Port Scan
7
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:222550) triggered by 168.144.64.28 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:222550) triggered by 168.144.64.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:14:37.990969 2026] [security2:error] [pid 23083:tid 23083] [client 168.144.64.28:56870] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[^\\\\w\\\\ \\\\.]" at ARGS:list[fullordering]. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "82"] [id "222550"] [rev "1"] [msg "COMODO WAF: SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 (CVE-2017-8917)||walkerweb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "walkerweb.com"] [uri "/index.php"] [unique_id "atGyvanjTubh8zVa_xiLpAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Web probing of unpublished host names on a private server (no legitimate client reaches them): GET / ...
show moreWeb probing of unpublished host names on a private server (no legitimate client reaches them): GET /.env. Last seen 2026-10-16 01:06:18 UTC. Automated detection (Caddy + CrowdSec).
show less
Repeated exploit attempts, for example: /user/register?element_parents=account/mail/%23value&ajax_fo ...
show moreRepeated exploit attempts, for example: /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax mail%5b%23post%5frender%5d%5b%5d=passthru&mail%5b%23type%5d=markup&mail%5b%23markup%5d=cat+%2fetc%2fpasswd&form%5fid=user%5fregister%5fform&%5fdrupal%5fajax=1 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1")
show less
