ABUSE.MOM
THREAT REPORT

IP Threat Report
187.161.133.125

ABUSE.MOM — BEHAVE OR GET EXPOSED

Generated: 2026-07-30 02:05:54
First seen: 2026-06-05 22:32:50
Last seen: 2026-06-27 23:10:02
115

⛔ Verdict: BLOCK

This IP address has been classified as a source of malicious automated activity. Threat score: 115/100. Total malicious requests observed: 143.

01

Geolocation & Classification

IP Address
187.161.133.125
Type
Unknown
Country
🇲🇽 Mexico
City
Apodaca
ISP
Television Internacional, S.A. de C.V.
Organization
Television Internacional, S.A. de C.V.
Autonomous System
Unknown
Hit Count
143
02

Detection Signatures

SignatureDescriptionPointsSeverity
DDoS / FloodBehavioral anomaly detected by automated analysis+0
Directory ScanBehavioral anomaly detected by automated analysis+0
Σ = 0
03

Observed Activity

Reconstructed HTTP requests from server access logs. Target domains redacted for security.

[redacted]
GET
/
200
Requests shown: 1 · HTTP 404: 0 · Dangerous patterns: 0

* Typical request patterns for detected signatures. Actual target domains are redacted.

04

Timeline

2026-06-05 22:32:50
First malicious request detected
IP entered monitoring from server access logs
During observation
Multiple detection signatures triggered
DDoS / Flood, Directory Scan
2026-06-27 23:10:02
Last malicious request observed
Total score reached: 115/100
Next cycle
IP blocked — all subsequent requests denied (HTTP 403)
Added to blocklist automatically
06

Recommendations

Actions taken & recommended

  • IP 187.161.133.125 is blocked at application level (HTTP 403)
  • Consider blocking at firewall level (iptables/CSF) to reduce server load
  • Ensure sensitive files (.env, .git, backups) are not accessible from the web

⚙️ Defensive Recommendations

Block 187.161.133.125 at the network perimeter. Implement defense-in-depth combining IP blocking with application-layer protections.

10

Threat Analysis

187.161.133.125 has been assigned a threat score of 115/100 (Critical). A score this high marks a critical threat actor. This address has demonstrated persistent, aggressive malicious behavior across multiple detection vectors.

📊 Threat Analysis

IP address 187.161.133.125 has been traced to Apodaca, Mexico, operating on the network of Television Internacional, S.A. de C.V.. Our threat detection systems have flagged this address based on observed malicious behavior patterns. During its 22-day observation window, we recorded 143 hostile requests from this IP — roughly 6.5 per day on average. Our records show 101 malicious IPs originating from Mexico, positioning it as a significant contributor to global threat activity. A score of 115/100 places this address in the top tier of severity. Block and investigate any historical connections.

11

Related Threats

🇲🇽 Top threats from Mexico

158.23.144.198 (280)68.155.146.66 (280)68.155.145.150 (280)34.51.104.11 (263)68.155.154.218 (255)View all →
12

Security Intelligence

💡 DDoS Mitigation Approaches

Distributed denial of service attacks overwhelm infrastructure with traffic volume. Effective mitigation combines always-on traffic scrubbing, anycast network distribution, rate limiting, and the ability to quickly scale absorption capacity during attacks.

💡 Satellite Internet Security

Satellite internet introduces unique security challenges including high latency that affects real-time threat detection, shared bandwidth that enables traffic sniffing, and coverage areas that cross multiple jurisdictions complicating legal response.

🔍 Check Any IP Address

Share this report: