Significant Threat
IP 87.120.93.78 identified as significant threat (8/10) from 16 events.
Multiple malicious indicators detected. Confidence level: 6%.
More threatening than 74% of monitored IPs
IP Address
87.120.93.78
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
DE
Location
H2nexus Ltd
ASN 215730
16
Reports
Community
Data Source
Threat Categories
SQL Injection
6
WP Database Injection
6
WP Code Injection
5
Hacking
5
WP User Enumeration
1
Technical Details
SQL injection attempts aim to manipulate database queries through unsanitized user input to extract or modify data.
Recommended Mitigations
Use parameterized queries, input validation, prepared statements, and database access controls.
Reputable Network
This IP is hosted on a network (ASN 215730) with generally good reputation. The ISP H2nexus Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
6%
Low Confidence
Confidence History
1. Sep 2025 - 4. Sep 2025
6%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Code Injection | Community | 75% | |
| WP Code Injection | Community | 75% | |
| WP Code Injection | Community | 75% | |
| WP User Enumeration WP Code Injection | Community | 75% | |
| WP Code Injection | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% | |
| SQL Injection WP Database Injection | Community | 75% |
Technical Details
Basic Information
- IP Address
- 87.120.93.78
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS215730
- ISP
- H2nexus Ltd
DNS Information
- Reverse DNS
- s277837.love-is.nexus
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 1 Sep 2025
- Last Reported
- 4 Sep 2025, 12:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS215730
H2nexus Ltd
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
4,266
Total Reports
170.6
Reports per IP
Network Context
This IP address belongs to H2nexus Ltd (AS215730), which manages 25 IP addresses in our monitoring system. Out of these, 4,266 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
74
%
Global Threat Ranking
This IP is more threatening than 74% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,492 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
16
avg: 23
-
Network Comparison
Compared against 32 IPs in ASN 215730
Threat Level
8/10
network avg: 6.1
+
Total Reports
16
network avg: 134
--
Network H2nexus Ltd has overall threat level 3/10
Geographic Comparison
Compared against 7,142 IPs in DE
Threat Level
8/10
country avg: 5.8
+
Total Reports
16
country avg: 61
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
8/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SQL Injection
6
WP Database Injection
6
Hacking
5
WP Code Injection
5
WP User Enumeration
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 16 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8%
-
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.5/10
Avg Threat
50%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.120.93.91
10/10
Confidence
81%
Reports
16
Location
DE
DE
94.159.111.151
10/10
Confidence
74%
Reports
52
Location
DE
DE
94.159.100.141
8/10
Confidence
74%
Reports
18
Location
DE
DE
45.144.53.78
10/10
Confidence
69%
Reports
23
Location
FI
FI
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
64.188.91.244
10/10
Confidence
63%
Reports
1,776
Location
DE
DE
87.120.93.239
10/10
Confidence
61%
Reports
43
Location
DE
DE
94.159.99.106
10/10
Confidence
57%
Reports
6
Location
DE
DE
94.159.110.150
8/10
Confidence
57%
Reports
6
Location
DE
DE
94.159.104.233
8/10
Confidence
51%
Reports
5
Location
DE
DE
45.144.53.136
0/10
Confidence
40%
Reports
2
Location
FI
FI
94.159.101.249
0/10
Confidence
39%
Reports
2
Location
DE
DE
144.31.1.189
7/10
Confidence
38%
Reports
2
Location
PL
PL
144.31.7.85
7/10
Confidence
37%
Reports
2
Location
FI
FI
94.159.103.78
0/10
Confidence
36%
Reports
3
Location
DE
DE
144.31.90.189
7/10
Confidence
30%
Reports
1
Location
FI
FI
150.241.95.187
7/10
Confidence
30%
Reports
1
Location
DE
DE
144.31.0.90
7/10
Confidence
30%
Reports
1
Location
PL
PL
2.27.27.6
0/10
Confidence
30%
Reports
1
Location
VI
VI
144.31.3.80
0/10
Confidence
30%
Reports
1
Location
PL
PL
IPs from the same subnet range, likely same network segment.
2
Related IPs
10/10
Avg Threat
71%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
128
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
6%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.156.87.165
8/10
Confidence
6%
Reports
19
Location
NL
NL
2602:fa59:9:5ed::1
8/10
Confidence
6%
Reports
15
Location
US
US
62.138.3.52
7/10
Confidence
6%
Reports
15
Location
FR
FR
146.70.185.32
8/10
Confidence
6%
Reports
15
Location
US
US
124.150.139.46
7/10
Confidence
6%
Reports
15
Location
AU
AU
139.59.71.236
8/10
Confidence
6%
Reports
14
Location
IN
IN
217.65.7.59
7/10
Confidence
6%
Reports
14
Location
RU
RU
93.123.109.44
7/10
Confidence
6%
Reports
14
Location
BG
BG
185.220.101.23
7/10
Confidence
6%
Reports
13
Location
DE
DE
176.65.151.193
7/10
Confidence
6%
Reports
12
Location
NL
NL
185.40.4.29
7/10
Confidence
6%
Reports
12
Location
VG
VG
171.25.193.38
7/10
Confidence
6%
Reports
12
Location
SE
SE
149.102.225.179
7/10
Confidence
6%
Reports
11
Location
US
US
185.196.220.38
7/10
Confidence
6%
Reports
11
Location
US
US
192.42.116.203
7/10
Confidence
6%
Reports
11
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203