178.128.18.98
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
121 from
47 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 mnazibo |
Date: Nov 12 12:10:24 2026 EAT | Reported IP: 178.128.18.98 mod_security | id: 920350 | SG/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address
|
SQL Injection Brute-Force Bad Web Bot | |
| 🇫🇷 LRob |
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.2; Trident/4.1)
|
Bad Web Bot | |
| 🇫🇮 oh.mg |
|
Brute-Force Web App Attack Port Scan | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-11-11T14:45:39Z.
|
Port Scan | |
| 🇫🇷 Stara |
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
|
Brute-Force Hacking Web App Attack | |
| Anonymous |
178.128.18.98 - [CN: SGP] [10/Nov/2026:18:04:33 -0300] "GET /public/plugins/alertlist/../../../../../../etc/passwd HTTP/1.1" Dest:Port 443 HTTP_Status: 400
...
|
Web App Attack | |
| 🇩🇪 altenglaner |
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
|
Hacking Web App Attack | |
| 🇫🇮 mnazibo |
|
SQL Injection Brute-Force Bad Web Bot | |
| Anonymous |
Blocked by firewall on hugin [4000/tcp] | Rule: UFW | SPT: 54222 | TTL: 44 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Backdrop CMS module - malicious activity detected
|
Bad Web Bot Web App Attack | |
| 🇩🇪 findlab |
Backdrop CMS module - malicious activity detected
|
Bad Web Bot Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Web scan: 4xx responses on several sites
|
Web App Attack Bad Web Bot | |
| 🇫🇷 Murazaki |
82.66.93.214 178.128.18.98 - - [08/Nov/2026:05:46:20 +0100] "POST /api/v4/projects/1/repository/comm%69ts HTTP/1.1" 503 190 "-" "-" "-"
...
|
Hacking | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
|
Bad Web Bot Web App Attack | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown