JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.120.126.138

87.120.126.138 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215730
Hostname(s)	s293217.love-is.nexus
Domain Name	h2.nexus
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.120.126.138

Whois 87.120.126.138

IP Abuse Reports for 87.120.126.138:

This IP address has been reported a total of 31 times from 24 distinct sources. 87.120.126.138 was first reported on January 1st 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LotPhantom	2026-06-18 10:19:14 (9 hours ago)	2026-06-18T10:19:14.462430+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-18T10:19:14.462430+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=87.120.126.138 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=21224 DF PROTO=TCP SPT=34386 DPT=5000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-18T10:19:14.462453+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=87.120.126.138 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=7661 DF PROTO=TCP SPT=53186 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇸🇬 drewf.ink	2026-06-18 08:12:18 (11 hours ago)	[08:12] Port scanning. Port(s) scanned: TCP/5000, TCP/8080	Port Scan
🇫🇮 iamxorum	2026-06-17 18:37:38 (1 day ago)	2026-06-17T18:37:37.323628+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-17T18:37:37.323628+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=87.120.126.138 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=59562 DF PROTO=TCP SPT=33082 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 [email protected]	2026-06-17 18:00:05 (1 day ago)	Attack attempt against Interwebbi servers; Port Scan detected from 87.120.126.138 (DE/Germany/s293 ... show more Attack attempt against Interwebbi servers; Port Scan detected from 87.120.126.138 (DE/Germany/s293217.love-is.nexus). 5 hits in the last 446 seconds; IP: 87.120.126.138; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇩🇪 cloudmax	2026-06-17 17:39:46 (1 day ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇮 sonot	2026-06-17 13:37:16 (1 day ago)	Blocked by UFW on mail [5000/tcp] \| SPT: 51338 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [5000/tcp] \| SPT: 51338 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sandra361	2026-06-15 22:25:43 (2 days ago)	Port scan detected: 23 attempts across 12 ports (3000,3141,4873,5000,8036,8080,8081,8082,8111,8181,9 ... show more Port scan detected: 23 attempts across 12 ports (3000,3141,4873,5000,8036,8080,8081,8082,8111,8181,9090,9292). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=87.120.126.138 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=7334 DF PROTO=TCP SPT=54760 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 Axel	2026-06-13 21:01:22 (4 days ago)	Blocked by UFW on MVI [4873/tcp] \| SPT: 46442 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [4873/tcp] \| SPT: 46442 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-06-12 14:11:03 (6 days ago)	Port scan detected: 11 attempts across 11 ports (3000,3141,5000,8036,8080,8081,8082,8111,8181,9090,9 ... show more Port scan detected: 11 attempts across 11 ports (3000,3141,5000,8036,8080,8081,8082,8111,8181,9090,9292). \| Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=87.120.126.138 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=5916 DF PROTO=TCP SPT=55404 DPT=3141 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 EnthecSolutions	2026-06-12 14:00:36 (6 days ago)	Detected by Enthec Solutions. \| Attempts: 63 in 24h \| Target port: 8081	Port Scan Hacking
Anonymous	2026-06-11 21:01:34 (6 days ago)	Try to connect to Port_Scan_8081_stealth	Port Scan
Anonymous	2026-06-11 15:49:45 (1 week ago)	2026-06-11T16:49:44.320534+01:00 vps kernel: [42933143.792633] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-11T16:49:44.320534+01:00 vps kernel: [42933143.792633] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=87.120.126.138 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=19763 DF PROTO=TCP SPT=53068 DPT=3141 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇮 Ticlem	2026-06-11 13:41:54 (1 week ago)	2026-06-11T15:41:53.581403+02:00 clement-turlure kernel: [2191489.412406] [UFW BLOCK] IN=enp0s31f6 O ... show more 2026-06-11T15:41:53.581403+02:00 clement-turlure kernel: [2191489.412406] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=87.120.126.138 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=44056 DF PROTO=TCP SPT=47644 DPT=8081 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T15:41:53.583685+02:00 clement-turlure kernel: [2191489.414265] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=87.120.126.138 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=9503 DF PROTO=TCP SPT=41902 DPT=8111 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T15:41:53.583693+02:00 clement-turlure kernel: [2191489.414456] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=87.120.126.138 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=21050 DF PROTO=TCP SPT=40218 DPT=9292 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 drewf.ink	2026-06-11 12:14:32 (1 week ago)	[12:14] Port scanning. Port(s) scanned: TCP/8081, TCP/9090	Port Scan
🇩🇪 ValtonTahiri	2026-06-11 09:50:02 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=87.120.126.138; proto=TCP; source_port=47942; target_port=8082; flags=SYN show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.241

🇨🇴 190.5.200.98

🇨🇴 181.56.174.63

🇵🇱 153.19.161.177

🇮🇳 103.178.105.180

🇺🇸 100.29.192.112

🇺🇸 32.185.216.164

🇺🇸 13.89.125.254

🇵🇭 222.127.241.21

🇭🇰 199.45.154.122

🇺🇸 98.159.37.252

🇷🇺 93.120.243.146

🇺🇸 13.89.125.231

🇺🇸 13.89.125.224

🇺🇸 13.89.125.22

🇨🇳 223.90.32.71

🇩🇪 156.236.31.85

🇮🇳 117.218.75.251

🇰🇷 115.91.48.142

🇷🇺 95.108.213.231