JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

109.120.137.78

Neutral Activity

Abuse confidence score ?

0% Low Risk

79 reports

20 reporters · latest 1 year ago

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215730
Hostname(s)	s339548.love-is.nexus
Domain Name	h2.nexus
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

109.120.137.78 has been reported 79 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 109.120.137.78

Export CSV

This IP address has been reported a total of 79 times from 20 distinct sources. 109.120.137.78 was first reported on June 17th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-04 21:07:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 17:07:05.936100 2025] [security2:error] [pid 7258:tid 7258] [client 109.120.137.78:56990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.slimlaw.com"] [uri "/.ENV.zip"] [unique_id "aLn_efs5CLYRnmQpvuesUgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 20:50:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.120.137.78 (s161482.love-is.nexus): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 109.120.137.78 (s161482.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 16:50:07.864971 2025] [security2:error] [pid 31270:tid 31270] [client 109.120.137.78:51238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.achildsspace.com"] [uri "/.ENV.zip"] [unique_id "aLn7fztfoXH-LGlntg0aiAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 19:58:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.120.137.78 (s161482.love-is.nexus): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 109.120.137.78 (s161482.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 15:58:17.337225 2025] [security2:error] [pid 24377:tid 24377] [client 109.120.137.78:55096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.ketsuri.com"] [uri "/.ENV.zip"] [unique_id "aLnvWe2m732kGMV1tY1prgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 18:54:59 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 14:54:54.014557 2025] [security2:error] [pid 1594977:tid 1595020] [client 109.120.137.78:50136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.globalactuariesregistry.com.richardleeweatherman.com"] [uri "/.ENV.zip"] [unique_id "aLngfoBVEysxhh_My-2WBgAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 18:37:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 109.120.137.78 (117525.h2.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 14:37:04.651220 2025] [security2:error] [pid 17099:tid 17099] [client 109.120.137.78:60759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lanegraves.com"] [uri "/.ENV.zip"] [unique_id "aLncUEx5R7McbsS2hHnn8gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-04-03 18:56:52 (1 year ago)	Port probe to tcp/40441 [srv133]	Port Scan
🇩🇪 onkeltom	2025-02-02 21:43:57 (1 year ago)	Unauthorized connection attempts	Hacking Brute-Force
🇩🇪 KPS	2025-02-02 18:13:02 (1 year ago)	PortscanM	Port Scan
🇩🇪 marzzzello	2025-02-02 17:22:40 (1 year ago)	Ports: 6001, 6006	Port Scan
🇩🇪 Admins@FBN	2025-02-02 17:20:13 (1 year ago)	FW-PortScan: Traffic Blocked srcport=56638 dstport=6002	Port Scan
🇩🇪 DV4	2025-02-02 17:18:58 (1 year ago)	Unauthorized connection attempt to port 6002 from 109.120.137.78	Port Scan
Anonymous	2025-02-02 17:17:20 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-02-02 11:07:09 (1 year ago)	Blocked by UFW (TCP on 6020) Source port: 52724 TTL: 240 Packet length: 44 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 6020) Source port: 52724 TTL: 240 Packet length: 44 TOS: 0x14 This report (for 109.120.137.78) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 CELOS-SOC	2024-08-15 09:46:25 (2 years ago)	Multiple Unauthorized SSLVPN Login Attempts	Brute-Force
🇩🇪 onkeltom	2024-08-14 16:53:21 (2 years ago)	Multiple unauthorized connection attempts	Hacking Brute-Force

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.137.149.171

🇺🇸 147.185.132.103

🇸🇬 43.173.174.51

🇺🇸 40.119.27.190

🇵🇭 120.89.37.150

🇭🇰 94.190.229.193

🇺🇸 74.7.227.134

🇧🇪 34.34.160.116

🇪🇬 197.199.224.52

🇧🇷 177.154.172.132

🇺🇸 172.236.102.190

🇮🇩 160.22.126.54

🇮🇳 152.52.197.130

🇺🇸 45.79.207.111

🇨🇳 36.134.27.91

🇯🇵 35.213.104.174

🇺🇸 2001:470:2cc:1::204

🇧🇪 198.235.24.221

🇹🇼 198.235.24.80

🇫🇷 172.68.151.33