AbuseIPDB » 87.124.180.161
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 87.124.180.161:
This IP address has been reported a total of 19 times from 16 distinct sources. 87.124.180.161 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 4 reports; Austria with 2 reports. The most common categories in these recent reports were: Port Scan 14 times; SSH 9 times; Brute-Force 7 times; Hacking 2 times; Exploited Host 1 time; Other 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇨🇭 ALPHANET |
SSH honeypot 2 login attempt
|
Hacking Brute-Force Exploited Host SSH | ||
| Anonymous |
SSH tarpit (endlessh) connection from 87.124.180.161
|
Brute-Force SSH | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-28 19:21:38 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇩🇪 phil2k |
|
DDoS Attack Port Scan Brute-Force SSH | ||
| 🇮🇹 RaffOne |
SSH - Attempt to login using invalid or illegal credential
|
Brute-Force SSH | ||
| 🇦🇺 foobax |
closed the connection from port 51230
|
SSH Port Scan | ||
| 🇵🇱 mkey |
|
Port Scan | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:35608 dst:23
|
Port Scan | ||
| 🇩🇪 _ArminS_ |
SP-Scan 34034:23 detected 2026.08.28 12:58:16
blocked until 2026.10.17 06:01:03
|
Port Scan | ||
| 🇺🇸 micropedro |
|
Port Scan | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:60434 dst:23
|
Port Scan | ||
| 🇧🇷 noconex |
|
Port Scan Brute-Force SSH | ||
| 🇺🇸 RAP |
2026-08-26 06:04:25 UTC Unauthorized activity to TCP port 22. SSH
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩