178.128.240.249
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
No reports in the last 60 days
178.128.240.249 has been reported 183 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
183 from
72 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 178.128.240.249 (NL/The Netherlands/-): 2 in the last 3600 secs (0-196)
|
Hacking | |
| 🇺🇸 MPL |
tcp/80
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/178.128.240.249
2026-05-07 17:28:46 /favicon.ico
2026-05-07 16:14:15 /
2026-05-07 17:28:45 /
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/6936
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1883)
Source port: 61003
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 178.128.240.249) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/15000
|
Port Scan | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| Anonymous |
DNS AXFR Attempt
|
DNS Compromise | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 178.128.240.249 (NL/The Netherlands/-): 2 in the last 3600 secs (0-201)
|
Hacking | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/11000 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 1224 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144
Connection: keep-alive
sec-ch-ua: "Google Chrome";v="142", "N
|
Port Scan Hacking | |
| 🇺🇸 Deltron3030 |
SSH brute-force attempt from 178.128.240.249 blocked by Houston-Xeon-Dartnode.
|
Brute-Force SSH | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 18 malicious requests on 2025-12-29 (e.g., env/backup probes, brute-force, or error bursts).
|
Hacking Web App Attack SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown