IP address

Passive DNS

Tags:

IP blacklists: ThreatFox
87.120.126.21 is listed on the ThreatFox blacklist.

Description: ThreatFox is a free platform from abuse.ch with the goal of<br>sharing indicators of compromise (IOCs) associated with malware with the<br>infosec community, AV vendors and threat intelligence providers.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-14 10:10:00.715000
Was present on blacklist at: 2025-10-13 02:10, 2025-10-13 06:10, 2025-10-13 10:10, 2025-10-13 14:10, 2025-10-13 18:10, 2025-10-13 22:10, 2025-10-14 02:10, 2025-10-14 06:10, 2025-10-14 10:10
FireHOL anonymizers
87.120.126.21 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-10-14 00:05:09
Was present on blacklist at: 2025-10-13 00:05, 2025-10-14 00:05

Origin AS: AS401115 - EKABI; AS215730 - H2NEXUS-AS
BGP Prefix: 87.120.126.0/24
geo: Germany, Frankfurt am Main; 🕑 Europe/Berlin
hostname: s189328.luxhost.cc
Address block ('inetnum' or 'NetRange' in whois database): 87.120.126.0 - 87.120.127.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80; Tags: eol-product; CPEs: cpe:/a:f5:nginx:1.24.0, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:linux:linux_kernel
ts_added: 2025-10-13 02:10:08.795000
ts_last_update: 2025-10-14 10:11:43.574000

Warden event timeline

DShield event timeline

Presence on blacklists