Critical Threat
IP address 87.120.191.124 is a critical-risk address operated by Vpsvault.host Ltd under ASN AS215925, United States, that has generated 547 abuse reports from automated honeypot sensors within a concentrated two-month window from November to December 2025, with all recent reports categorizing its activity as general hacking intrusion attempts, placing this IP squarely in the highest threat tier for network defenders evaluating whether this address poses a danger to their infrastructure.
The dataset supporting this assessment carries a 77% confidence rating based on 20 identical threat-category reports sourced exclusively from automated honeypot sensors, which detected consistent unauthorized-access patterns across the reporting period. With 547 total abuse reports filed against this single address and zero activity-frequency scoring despite the elevated report volume, the data suggests a high-volume, automated threat actor leveraging this IP for sustained scanning and exploitation activity rather than opportunistic, infrequent probes. The network is operated by Vpsvault.host Ltd, a hosting provider whose infrastructure appears to be actively abused for malicious purposes, and the geographic assignment to the United States places this source within one of the most heavily monitored and defensively instrumented network spaces globally.
Hacking activity in this context refers to automated intrusion attempts, vulnerability probing, and unauthorized-access campaigns that systematically target exposed services such as SSH, RDP, HTTP interfaces, or database endpoints. An IP with a threat level of 10 out of 10 that has accumulated hundreds of reports in weeks represents a significant, immediate risk to any directly accessible service; these automated campaigns typically cycle through common credential combinations, known software exploits, and misconfiguration attacks at scale, meaning a single exposed port can become the entry point for credential theft, malware deployment, or lateral network movement if left unprotected.