This IP address has been reported a total of
8
times from
7 distinct
sources.
189.28.222.202 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 1
report;
France
with 1
report.
The only category in these recent reports was:
Bad Web Bot
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Not following 301 redirects — wasted requests | method: GET | path: /wp-login.php | ua: Mozilla/5.0 ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
(wordpress) Apache: Failed WordPress login from 189.28.222.202 (BR/Brazil/189-28-222-202.unifique.ne ...
show more(wordpress) Apache: Failed WordPress login from 189.28.222.202 (BR/Brazil/189-28-222-202.unifique.net): 10 in the last 3600 secs (0-193)
show less
(mod_security) mod_security (id:210730) triggered by 189.28.222.202 (189-28-222-202.unifique.net): 1 ...
show more(mod_security) mod_security (id:210730) triggered by 189.28.222.202 (189-28-222-202.unifique.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 10:23:49.036345 2025] [security2:error] [pid 2594721:tid 2594754] [client 189.28.222.202:56851] [client 189.28.222.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aafm.us|F|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.us"] [uri "/gafm.org/www.GAFM.com"] [unique_id "aBOD9Sd9yiRnrsXATur9ZQAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
189.28.222.202 (BR/Brazil/189-28-222-202.unifique.net), 5 distributed imapd attacks on account [reda ...
show more189.28.222.202 (BR/Brazil/189-28-222-202.unifique.net), 5 distributed imapd attacks on account [redacted]
show less
