178.128.149.123
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
No reports in the last 60 days
178.128.149.123 has been reported 152 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
152 from
112 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇫🇷 JPPO |
21 hits : GET /.env or GET //.env with or without prefix /api,/config ...
|
Web App Attack | |
| 🇧🇷 websecuritylabs |
Web App Attack
|
Web App Attack | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/178.128.149.123
2026-04-18 04:40:17 /.env
2026-04-18 00:14:06 /.env
2026-04-18 06:12:39 /.env
|
Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-17.
|
Web App Attack SSH Hacking | |
| Anonymous |
"GET /.env HTTP/1.1"
|
Hacking Web App Attack | |
| 🇳🇿 FaB Property Group |
Requested file: .env
|
Web App Attack | |
| 🇳🇿 FaB Property Group |
Requested file: .env
|
Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octablocked]
|
Web App Attack | |
| 🇫🇷 service Informatique |
GET /.env
|
Web App Attack | |
| 🇳🇱 jjnxpct |
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]
|
Web App Attack Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown