JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.192.241.133

87.192.241.133 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 50%: ?

50%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.192.241.133

Whois 87.192.241.133

IP Abuse Reports for 87.192.241.133:

This IP address has been reported a total of 15 times from 8 distinct sources. 87.192.241.133 was first reported on September 14th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-09-16 19:39:22 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 jbcrn	2026-09-16 11:32:02 (14 hours ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇩🇪 burlacu.org	2026-09-15 21:12:03 (1 day ago)	Nginx multi-log analysis detected: wordpress_scan. Evidence: WordPress config access with 3 attempts ... show more Nginx multi-log analysis detected: wordpress_scan. Evidence: WordPress config access with 3 attempts. Blocked automatically. show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 21:09:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:09:51.254327 2026] [security2:error] [pid 1298:tid 1298] [client 87.192.241.133:57660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crittergetterpestcontrol.azcrittergetter.com"] [uri "/wp-config.php~"] [unique_id "aqm0H2zsKbJKdQ3YqGRimwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:45:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:45:15.507697 2026] [security2:error] [pid 27408:tid 27408] [client 87.192.241.133:37148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femalegamblers.mobileonlinecasinos.co"] [uri "/wp-config.php.save"] [unique_id "aqmuW8Ex9aO6PEYN6Vy-OQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:14:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:14:14.905616 2026] [security2:error] [pid 4745:tid 4745] [client 87.192.241.133:58820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mavikalem.org"] [uri "/wp-config.php.orig"] [unique_id "aqmnFtS5yNjg6L3Jtg2xdgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 17:55:42 (1 day ago)	[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 87.192.241.133 - - [15/Sep/2026:19:55:42 +0200] "GET /.env.txt HTTP/1.1" 301 485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-09-15 17:42:29 (1 day ago)	http-sensitive-files - IP: 87.192.241.133 - time="2026-09-15T19:42:29+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 87.192.241.133 - time="2026-09-15T19:42:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 87.192.241.133 (UZ/0) : 4h ban on Ip 87.192.241.133" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 17:32:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:32:18.850962 2026] [security2:error] [pid 3699:tid 3745] [client 87.192.241.133:52112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.agqo.org"] [uri "/.git/config"] [unique_id "aqmBImoPXOvU9i2gw4RaiwAAAYw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 17:16:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:15:53.471765 2026] [security2:error] [pid 5522:tid 5522] [client 87.192.241.133:43854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mjaaforum.org"] [uri "/.git/config"] [unique_id "aql9Sco_Uwi_GpRsECA3cQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Sling	2026-09-15 16:53:55 (1 day ago)	Automated detection: IP accessed 7 sensitive endpoints within 30s on slingexe.me. Paths: /.git/HEAD, ... show more Automated detection: IP accessed 7 sensitive endpoints within 30s on slingexe.me. Paths: /.git/HEAD, /.env, /.env.bak, /.env.backup, /.env.local, /.env.production, /.env.dev. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36. show less	Web App Attack Bad Web Bot Hacking
🇺🇸 TPI-Abuse	2026-09-15 11:24:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:24:31.945523 2026] [security2:error] [pid 12609:tid 12609] [client 87.192.241.133:33630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonleefamily.brushmileage.org"] [uri "/wp-config.php.old"] [unique_id "aqkq71MZUvYZMaSCf55zAgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 22:41:23 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 18:41:18.124316 2026] [security2:error] [pid 24292:tid 24308] [client 87.192.241.133:36200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testproperty.pref-realestate.com"] [uri "/wp-config.php.save"] [unique_id "aqh4DkMeErmkTAxj4lF5zAAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-14 20:50:03 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 14:57:42 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 87.192.241.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:57:36.415517 2026] [security2:error] [pid 1050:tid 1050] [client 87.192.241.133:49372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adlc18.org"] [uri "/wp-config.php~"] [unique_id "aqgLYN1qrmpGYjtohTidywAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.42.164

🇺🇸 66.132.195.113

🇺🇸 64.62.156.80

🇧🇪 34.53.255.185

🇺🇦 217.147.172.185

🇩🇪 213.209.159.175

🇦🇷 207.248.127.236

🇹🇼 198.235.24.98

🇻🇪 190.89.29.251

🇷🇴 185.19.40.179

🇩🇪 178.105.200.202

🇧🇷 177.130.254.108

🇺🇸 162.216.149.216

🇺🇸 162.216.149.27

🇺🇸 154.222.99.186

🇫🇮 147.185.133.82

🇺🇸 103.103.98.93

🇻🇳 103.61.44.43

🇺🇿 94.158.58.101

🇨🇦 85.217.149.59