87.120.126.231

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
44% Elevated
26 reports
20 reporters · latest 1 week ago
ISP
H2.NEXUS Frankfurt Network
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215730
Hostname(s)
s282535.love-is.nexus
Domain Name
h2.nexus
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 3 🇨🇭 Switzerland 2
Most common categories Web App Attack 10 Hacking 7 Bad Web Bot 6 Web Spam 2 DDoS Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 henri9813
DE 87.120.126.231 - - [29/Oct/2026:07:50:16 +0100] "GET /modules/ultimateimagetool/image.php?image=../../classes/controller/AdminController.php HTTP/2.0" 200 196577 "-" "curl/8.21.0"
Web App Attack Hacking
Anonymous
"GET /wp-includes/js/wp-emoji-release.min.js?ver=x HTTP/1.1"
Hacking Web App Attack
🇺🇸 dot.mg
Bad behaviour
Web Spam
🇺🇸 entangled_mongoose
Probed /wp-includes/js/wp-emoji-release.min.js?ver=x.
Web App Attack
🇨🇭 lufi
2026-10-18 09:41:49 87.120.126.231: blacklisted Pattern: wp-includes/ ...
Web Spam Brute-Force Hacking Web App Attack
🇬🇧 CrystalMaker
Wordpress attack - GET /wp-includes/js/wp-emoji-release.min.js?ver=x
Web App Attack
🇳🇱 MyGlobalFlowers
Multiple WAF Violations
Web App Attack
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /, /wp-includes/js/wp-emoji-release.min.js | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0 Safari/537.36 | 2026-10-18 07:12 UTC
Bad Web Bot
Anonymous
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/js/wp-emoji-release.min.js
Web App Attack
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com
IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
Anonymous
Banned by SPAMHAUS ASN-DROP list (ASN: 215730)
DDoS Attack Hacking Bad Web Bot Web App Attack
🇩🇪 netclix.gr
(bot_kill_mega) Aggressive Bot Blocked: Python 87.120.126.231 (DE/Germany/s282535.love-is.nexus)
Hacking
🇨🇭 backslash
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇫🇷 LRob
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Python/3.14 aiohttp/3.14.4
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 194.163.137.90
🇺🇸 172.58.243.38
🇺🇸 157.230.179.179
🇩🇪 82.141.48.92
🇬🇧 35.203.211.23
🇺🇸 34.205.239.35
🇸🇪 31.208.252.54
🇵🇰 175.107.2.18
🇳🇱 109.160.32.132
🇺🇸 70.167.235.204
🇷🇺 62.122.195.14
🇺🇸 40.74.213.22
🇰🇷 220.76.91.28
🇳🇱 200.138.46.163
🇨🇳 182.119.225.68
🇲🇽 172.195.108.132
feedback