178.128.149.39

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
28% Elevated
21 reports
16 reporters · latest 1 month ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 5 🇺🇸 United States of America 4 🇩🇪 Germany 3
Most common categories Port Scan 16 Hacking 4 Web App Attack 2 Brute-Force 2 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Kejult
Honeypot Finding: repeated TCP service probing on TCP/2181 (service); 14 application-level events across 14 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 donarev419
Port scan detected on port 9203 (connection without data transfer)
Port Scan
🇧🇷 somosbr
[2026-09-19T03:01:32Z] Unsolicited scan from 178.128.149.39 to port 201/tcp
Port Scan
Anonymous
Reported by RattusGuard: Honeypot: mongodb emulator (port 27018/tcp)
Port Scan Hacking
Anonymous
9202/tcp (1 or more attempts)
Port Scan
🇦🇪 abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force
🇺🇸 ratcarcher-labs
Port Scan Bad Web Bot
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 33 in 24h | Target port: 9203
Port Scan Hacking
🇭🇰 CyberFox
9302/tcp (1 or more attempts)
Port Scan
🇩🇪 Kejult
Honeypot Finding: repeated TCP service probing on TCP/9302 (service); 30 application-level events across 30 source port(s). Sensor(s): Honeytrap.
Port Scan
🇪🇸 whatda
Redis unauthorized command: "info"
Hacking Port Scan
🇹🇷 trakyabirlik
Auto-blocked by Seczar SecureOps — Database Service Brute Force (12 events in 5min) at 2026-09-18 03:17
Web App Attack
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — Database Service Brute Force (5 events in 5min) at 2026-09-18 02:16
Web App Attack
🇺🇸 HamSammich
Automated sensor: 2 MySQL connection/probe attempts over the last 24h (latest 2026-09-17T22:25Z).
Hacking Brute-Force
🇭🇰 CyberFox
9093/tcp (1 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 118.193.61.14
🇳🇱 89.21.67.183
🇺🇸 69.119.210.185
🇺🇸 68.199.224.32
🇺🇸 47.251.98.112
🇺🇸 45.148.234.17
🇦🇷 45.70.10.168
🇺🇸 44.202.254.113
feedback