JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

132.248.15.189

Activity Trending Down

Abuse Confidence Score

34% Elevated

373 reports

133 reporters · latest 1 month ago

ISP: Universidad Nacional Autonoma de Mexico
Usage Type: University/College/School
ASN: AS278
Hostname(s): analitica.icmyl.unam.mx
Domain Name: unam.mx
Country: 🇲🇽 Mexico
City: Mexico City, Mexico City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

373 from 133 distinct reporters

First reported

June 30th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 17 🇨🇭 Switzerland 4 🇬🇧 United Kingdom of Great Britain and Northern Ireland 4

Most common categories Web App Attack 25 Hacking 12 Brute-Force 11 Port Scan 6 Bad Web Bot 4

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 xavier-momain.eu	2026-09-16 20:13:36 (1 month ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇹🇷 neron	2026-09-13 18:55:32 (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 xavier-momain.eu	2026-09-12 07:01:09 (1 month ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇫🇷 Catalin Negru	2026-09-12 05:27:43 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇹🇷 neron	2026-09-11 22:55:32 (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-09-10 06:55:40 (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 Catalin Negru	2026-09-08 18:55:14 (1 month ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇨🇭 4server	2026-09-07 06:13:31 (1 month ago)	[MonSep0708:13:25.2748012026][security2:error][pid4108270:tid4108651][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ... show more [MonSep0708:13:25.2748012026][security2:error][pid4108270:tid4108651][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.ch\"][uri\"/wp-json/acf/v3/options/a\"][unique_id\"ap5WBd2K3mGgS36UNz0c2AAAAQY\"] show less	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-07 04:35:04 (1 month ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
🇩🇪 4server	2026-09-07 00:52:20 (1 month ago)	[MonSep0702:52:14.6092882026][security2:error][pid3610935:tid3610993][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ... show more [MonSep0702:52:14.6092882026][security2:error][pid3610935:tid3610993][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"vg13.ch\"][uri\"/wp-json/acf/v3/options/a\"][unique_id\"ap4Kvva5rJPnJOw_5iSlhQAAAZY\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 FireGuard Server	2026-09-06 09:55:10 (1 month ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443	Port Scan Hacking
🇨🇭 4server	2026-09-06 06:05:07 (1 month ago)	[SunSep0608:05:04.6178562026][security2:error][pid3609742:tid3611090][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ... show more [SunSep0608:05:04.6178562026][security2:error][pid3609742:tid3611090][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"support-ticino.ch\"][uri\"/wp-json/acf/v3/options/a\"][unique_id\"ap0CkMHpp68SSxDgCIhS7QAAABc\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-09-06 01:22:39 (1 month ago)	[SunSep0603:22:37.7153712026][security2:error][pid2264778:tid2264888][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ... show more [SunSep0603:22:37.7153712026][security2:error][pid2264778:tid2264888][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"specialfood.ch\"][uri\"/wp-json/acf/v3/options/a\"][unique_id\"apzAXe36-6Ned0-bSbS10QAAAMI\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-09-05 19:02:40 (1 month ago)	[05/Sep/2026:22:02:39 +0300] -- 132.248.15.189 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-json/acf/v3/options/a?id=wp_mail&field=smtp HTTP/1.1	Bad Web Bot Web App Attack
🇭🇳 remurillod80	2026-09-05 09:16:16 (1 month ago)	[Sat Sep 05 03:16:15.416833 2026] [security2:error] [pid 637343:tid 637343] [client 132.248.15.189:35022] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/crs/curre ... show more [Sat Sep 05 03:16:15.416833 2026] [security2:error] [pid 637343:tid 637343] [client 132.248.15.189:35022] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1002"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "\|text/html\|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/255/153"] [hostname "robertomurillo.net"] [uri "/wp-json/acf/v3/options/a"] [unique_id "apvd38s2Zk784iitAstHqwAAAAM"] [Sat Sep 05 03:16:15.421708 2026] [security2:error] [pid 637343:tid 637343] [client 132.248.15.189:35022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/modsecur ... show less	Web Spam Hacking SQL Injection Brute-Force Web App Attack

Showing 1 to 15 of 373 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇬 78.128.114.46

🇧🇪 35.210.45.130

🇨🇴 178.83.168.221

🇧🇷 177.53.133.130

🇰🇷 121.133.167.123

🇳🇵 103.190.40.129

🇧🇬 79.124.49.82

🇦🇺 74.91.195.12

🇺🇸 70.167.235.229

🇺🇸 66.132.172.109

🇺🇸 50.6.194.35

🇸🇬 47.82.15.149

🇺🇸 40.77.167.2

🇰🇷 222.232.176.7

🇧🇷 179.109.70.97

🇺🇸 173.44.39.157

🇩🇪 152.53.253.224

🇷🇺 109.194.108.203

🇫🇮 45.144.234.157

🇩🇪 45.135.193.194