JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.120.64.137

87.120.64.137 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 50%: ?

50%

ISP	Open Fiber S.P.A.
Usage Type	Fixed Line ISP
ASN	AS210218
Domain Name	openfiber.it
Country	🇮🇹 Italy
City	Turin, Piedmont

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.120.64.137

Whois 87.120.64.137

IP Abuse Reports for 87.120.64.137:

This IP address has been reported a total of 21 times from 12 distinct sources. 87.120.64.137 was first reported on December 6th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 03:47:02 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:46:57.601271 2026] [security2:error] [pid 20365:tid 20365] [client 87.120.64.137:34068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nuewines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nuewines.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atmHMQFwS7Eyk1hUX5jwEwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 17:54:49 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:54:41.809661 2026] [security2:error] [pid 6594:tid 6698] [client 87.120.64.137:48092] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|almerirock.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "almerirock.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atj8YVMSqUWYy7DSUDKF_gAAAgs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 05:50:41 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:50:33.957856 2026] [security2:error] [pid 23958:tid 23958] [client 87.120.64.137:60300] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thefrontporchoffering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thefrontporchoffering.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atBpqdTZUGXrC3WPgr5kMwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-13 21:31:01 (1 week ago)	Web exploit attempt \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more Web exploit attempt \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| 2026-10-13 21:31 UTC show less	Hacking Web App Attack
Anonymous	2026-10-13 16:02:23 (1 week ago)	WordPress Brute Force	Brute-Force
🇩🇪 FeG Deutschland	2026-10-12 20:30:46 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-10-12 04:15:14 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-10-10 09:25:05 (1 week ago)	87.120.64.137 - - [10/Oct/2026:11:25:04 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 87.120.64.137 - - [10/Oct/2026:11:25:04 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 LRob	2026-10-01 20:49:49 (3 weeks ago)	WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/ ... show more WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| 2026-10-01 20:49 UTC show less	Brute-Force Web App Attack
🇨🇿 lp	2026-10-01 07:51:50 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 87.120.64.137 2026-10-01T09:36:01+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 87.120.64.137 2026-10-01T09:36:01+02:00 vpn Access-Reject 'iai' station: 87.120.64.137 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-09-29 17:48:13 (3 weeks ago)	(wordpress) Failed wordpress login from 87.120.64.137 (IT/Italy/Turin/Bairo/-/[redacted]): (CF_ENAB ... show more (wordpress) Failed wordpress login from 87.120.64.137 (IT/Italy/Turin/Bairo/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇨🇿 Countryman	2026-09-29 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-09-26 07:20:10 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 03:19:59.132538 2026] [security2:error] [pid 1839:tid 1839] [client 87.120.64.137:46546] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kontikimotorcycles.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kontikimotorcycles.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ardyH5gwkTlauLHEqvZk7wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 14:37:32 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 87.120.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 10:37:26.867868 2026] [security2:error] [pid 28133:tid 28133] [client 87.120.64.137:33096] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bikinitweets.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bikinitweets.com"] [uri "/wp-json/wp/v2/users"] [unique_id "araHJqMuDxWri5Ii2uX7PgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-09-25 04:24:23 (4 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇴 182.93.50.90

🇹🇷 176.236.127.114

🇺🇸 162.216.149.182

🇫🇷 91.231.89.179

🇷🇺 87.229.254.207

🇸🇦 79.170.53.30

🇳🇱 77.239.124.67

🇮🇳 49.200.127.10

🇫🇮 13.140.81.9

🇵🇰 202.66.180.163

🇬🇧 200.138.46.45

🇹🇼 198.235.24.8

🇳🇱 185.242.226.9

🇧🇷 179.152.167.159

🇺🇸 104.28.167.45

🇺🇸 104.28.153.185

🇰🇭 103.120.135.135

🇵🇱 94.26.88.90

🇫🇷 85.217.140.42

🇮🇳 49.37.218.30