JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 132.248.15.189

132.248.15.189 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Universidad Nacional Autonoma de Mexico
Usage Type	University/College/School
ASN	AS278
Hostname(s)	analitica.icmyl.unam.mx
Domain Name	unam.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 132.248.15.189

Whois 132.248.15.189

IP Abuse Reports for 132.248.15.189:

This IP address has been reported a total of 41 times from 33 distinct sources. 132.248.15.189 was first reported on June 30th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarkGGN	2026-07-13 08:00:09 (3 hours ago)	Web attack. [1783734667] [0.02020] [] [#1085021] [1461] [2] [132.248.15.189] [403] [GET] [/index.ph ... show more Web attack. [1783734667] [0.02020] [] [#1085021] [1461] [2] [132.248.15.189] [403] [GET] [/index.php] [WP vulnerability] [hex:4745543a70616765203d2067726176697479736d74702d73657474696e6773] [1783927294] [0.02350] [www.*] [#5807548] [1461] [2] [132.248.15.189] [403] [GET] [/index.php] [WP vulnerability] [hex:4745543a70616765203d2067726176697479736d74702d73657474696e6773] show less	Web App Attack
🇧🇪 taivas.nl	2026-07-13 04:32:20 (7 hours ago)	Many_bad_calls	Web App Attack
Anonymous	2026-07-12 15:43:38 (20 hours ago)	GET wp-json/gravitysmtp/v1/tests/mock-data \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Geck ... show more GET wp-json/gravitysmtp/v1/tests/mock-data \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0 \| Time: 2026-07-12 15:43:38 UTC show less	Web App Attack
🇩🇪 expandmade.com	2026-07-12 15:12:05 (20 hours ago)	unauthorized rest api call [12/Jul/2026:15:12:04 "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=g ... show more unauthorized rest api call [12/Jul/2026:15:12:04 "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings"] show less	Web App Attack
🇺🇸 mnsf	2026-07-12 15:05:28 (20 hours ago)	Too many Status 40X (13)	Brute-Force Web App Attack
Anonymous	2026-07-12 09:53:00 (1 day ago)	Blocked by firewall on hugin [443/tcp] \| Rule: AbuseIPDB \| SPT: 59062 \| TTL: 64 \| LEN: 60 \| TOS: 0x0 ... show more Blocked by firewall on hugin [443/tcp] \| Rule: AbuseIPDB \| SPT: 59062 \| TTL: 64 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 4server	2026-07-12 06:02:44 (1 day ago)	[SunJul1208:02:42.5501072026][security2:error][pid3499318:tid3499417][client132.248.15.189:0]ModSecu ... show more [SunJul1208:02:42.5501072026][security2:error][pid3499318:tid3499417][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"vg13.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"alMuAj_Mr8HYzN2nHrp0TgAAAMY\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-07-12 05:31:07 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-07-12 05:03:54 (1 day ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇭🇳 unph	2026-07-12 03:51:01 (1 day ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇦🇺 FireGuard Server	2026-07-11 16:10:08 (1 day ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443	Port Scan Hacking
🇪🇸 Gem	2026-07-11 14:35:35 (1 day ago)	Unauthorized web scan.	Web App Attack
🇨🇭 4server	2026-07-11 13:08:29 (1 day ago)	[SatJul1115:08:22.8278402026][security2:error][pid1660383:tid1660579][client132.248.15.189:0]ModSecu ... show more [SatJul1115:08:22.8278402026][security2:error][pid1660383:tid1660579][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"support-ticino.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"alJARqgyXdPE_2yUCTeMxgAAAIw\"] show less	Hacking Web App Attack
🇺🇸 etu brutus	2026-07-11 09:19:20 (2 days ago)	132.248.15.189 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-10 19:27:46 (2 days ago)	[FriJul1021:27:43.4017922026][security2:error][pid1691134:tid1691256][client132.248.15.189:0]ModSecu ... show more [FriJul1021:27:43.4017922026][security2:error][pid1691134:tid1691256][client132.248.15.189:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"restaurantgandria.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"alFHr0Uulq87v2dYLkxrgAAAANY\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.85.179.77

🇿🇦 165.16.186.221

🇨🇳 122.188.86.59

🇨🇳 116.7.248.50

🇨🇳 115.190.165.93

🇮🇳 36.255.6.173

🇮🇳 2409:4090:9010:7:605d:a406:b30a:68f7

🇮🇳 2401:4900:889f:5ad0:5d67:f1a3:791a:7f9a

🇫🇷 143.244.57.88

🇨🇳 116.236.43.254

🇵🇰 103.162.41.75

🇨🇳 101.126.53.14

🇨🇦 85.217.149.70

🇩🇪 69.5.169.155

🇱🇹 62.60.130.219

🇮🇳 49.43.168.28

🇮🇳 2404:6800:4000:101d::125

🇺🇸 159.223.160.156

🇮🇩 157.85.211.39

🇮🇳 117.252.93.114