High Risk
IP 87.120.126.236 rated at threat level 7/10 based on 32 security reports.
Pattern analysis reveals concerning activity. Confidence: 11%.
More threatening than 55% of monitored IPs
IP Address
87.120.126.236
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
DE
Location
H2nexus Ltd
ASN 215730
32
Reports
Community
Data Source
Threat Categories
SQL Injection
28
WP Database Injection
28
WP REST API Abuse
1
WP User Enumeration
1
Web Spam
1
WP Trackback Spam
1
Technical Details
SQL injection attempts aim to manipulate database queries through unsanitized user input to extract or modify data.
Recommended Mitigations
Use parameterized queries, input validation, prepared statements, and database access controls.
Reputable Network
This IP is hosted on a network (ASN 215730) with generally good reputation. The ISP H2nexus Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
7%
Low Confidence
Confidence History
27. Sep 2025 - 30. Sep 2025
11%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| WP User Enumeration WP REST API Abuse | Community | 75% | |
| WP Trackback Spam Web Spam | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% |
Technical Details
Basic Information
- IP Address
- 87.120.126.236
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS215730
- ISP
- H2nexus Ltd
DNS Information
- Reverse DNS
- s265277.love-is.nexus
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 32
- First Reported
- 27 Sep 2025
- Last Reported
- 30 Sep 2025, 07:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS215730
H2nexus Ltd
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
4,266
Total Reports
170.6
Reports per IP
Network Context
This IP address belongs to H2nexus Ltd (AS215730), which manages 25 IP addresses in our monitoring system. Out of these, 4,266 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
55
%
Global Threat Ranking
This IP is more threatening than 55% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,722 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
32
avg: 23
+
Network Comparison
Compared against 32 IPs in ASN 215730
Threat Level
7/10
network avg: 6.1
+
Total Reports
32
network avg: 134
--
Network H2nexus Ltd has overall threat level 3/10
Geographic Comparison
Compared against 7,144 IPs in DE
Threat Level
7/10
country avg: 5.8
+
Total Reports
32
country avg: 61
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
8/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
SQL Injection
30
WP Database Injection
30
WP Trackback Spam
1
Web Spam
1
WP User Enumeration
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8%
-
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.5/10
Avg Threat
50%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.120.93.91
10/10
Confidence
81%
Reports
16
Location
DE
DE
94.159.111.151
10/10
Confidence
74%
Reports
52
Location
DE
DE
94.159.100.141
8/10
Confidence
74%
Reports
18
Location
DE
DE
45.144.53.78
10/10
Confidence
69%
Reports
23
Location
FI
FI
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
64.188.91.244
10/10
Confidence
63%
Reports
1,776
Location
DE
DE
87.120.93.239
10/10
Confidence
61%
Reports
43
Location
DE
DE
94.159.99.106
10/10
Confidence
57%
Reports
6
Location
DE
DE
94.159.110.150
8/10
Confidence
57%
Reports
6
Location
DE
DE
94.159.104.233
8/10
Confidence
51%
Reports
5
Location
DE
DE
45.144.53.136
0/10
Confidence
40%
Reports
2
Location
FI
FI
94.159.101.249
0/10
Confidence
39%
Reports
2
Location
DE
DE
144.31.1.189
7/10
Confidence
38%
Reports
2
Location
PL
PL
144.31.7.85
7/10
Confidence
37%
Reports
2
Location
FI
FI
94.159.103.78
0/10
Confidence
36%
Reports
3
Location
DE
DE
144.31.90.189
7/10
Confidence
30%
Reports
1
Location
FI
FI
150.241.95.187
7/10
Confidence
30%
Reports
1
Location
DE
DE
144.31.0.90
7/10
Confidence
30%
Reports
1
Location
PL
PL
2.27.27.6
0/10
Confidence
30%
Reports
1
Location
VI
VI
144.31.3.80
0/10
Confidence
30%
Reports
1
Location
PL
PL
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
130
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
11%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
109.70.100.5
7/10
Confidence
11%
Reports
57
Location
AT
AT
95.85.238.20
7/10
Confidence
11%
Reports
53
Location
CZ
CZ
46.224.215.94
8/10
Confidence
11%
Reports
51
Location
DE
DE
185.220.101.10
7/10
Confidence
11%
Reports
43
Location
DE
DE
83.217.208.173
7/10
Confidence
11%
Reports
30
Location
RU
RU
192.0.86.182
8/10
Confidence
11%
Reports
24
Location
US
US
185.220.101.22
7/10
Confidence
11%
Reports
24
Location
DE
DE
45.13.225.78
7/10
Confidence
11%
Reports
18
Location
DE
DE
171.25.193.35
7/10
Confidence
11%
Reports
18
Location
SE
SE
220.158.232.245
7/10
Confidence
11%
Reports
15
Location
KH
KH
217.154.180.55
8/10
Confidence
11%
Reports
13
Location
ES
ES
212.42.58.120
8/10
Confidence
11%
Reports
13
Location
RU
RU
160.187.210.194
8/10
Confidence
11%
Reports
12
Location
MY
MY
217.154.36.120
7/10
Confidence
11%
Reports
12
Location
GB
GB
87.106.44.42
7/10
Confidence
11%
Reports
12
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203