178.128.157.2
Classification: Malicious
178.128.157.2 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-28. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SSH Attacker | Blocklist.de | 2023-03-23 05:52:04 | 2026-08-28 14:02:25 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-08-26 09:14:45 | 2026-08-26 09:14:45 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-08-26 09:14:43 | 2026-08-26 09:14:43 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-08-24 07:29:01 | 2026-08-25 06:19:32 | attacker compromised malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-24 06:31:16 | 2026-08-25 06:19:32 | anomalous-activity attacker malicious-activity reconnaissance | |
| Bruteforce | AbuseIPDB | 2026-08-24 06:24:46 | 2026-08-25 06:19:32 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-24 07:26:12 | 2026-08-25 06:14:47 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-25 00:07:33 | 2026-08-25 00:07:33 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-25 00:07:33 | 2026-08-25 00:07:33 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-08-24 06:24:46 | 2026-08-25 00:07:33 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-08-24 11:19:31 | 2026-08-24 11:19:31 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-24 00:00:00 | 2026-08-24 00:00:00 | attacker malicious-activity | |
| Mail Spammer | Barracuda | 2023-03-23 05:52:05 | 2025-02-25 21:38:02 | ||
| Unauthorized scanning of hosts | Blocklist.net.ua | 2024-12-08 19:50:11 | 2024-12-08 19:50:11 | malicious-activity | |
| Malicious Host | CIArmy | 2024-08-21 19:36:53 | 2024-08-23 01:26:57 | malicious-activity | |
| SSH Attacker | Blocklist.net.ua | 2023-03-28 08:14:57 | 2023-09-28 07:18:26 | malicious-activity |
Tags
abuse ssh bruteforce botWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- ripencc
- AS date
- 2010-03-03 00:00:00
- AS CIDR
- 178.128.144.0/20
- CIDR
- 178.128.144.0/20
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas, FL2 New York, NY, 10013 United States of America
- City
- North Bergen
- State
- NJ
- Postal code
- 07047
- Country
- US — United States 🇺🇸
- First indexed
- 2023-03-23 05:52:04
- Last updated
- 2026-08-28 14:02:25
Malicious IPs in the same CIDR
178.128.156.225 178.128.157.114 178.128.153.122 178.128.150.75 178.128.156.35 178.128.158.192 178.128.152.139 178.128.157.2 178.128.153.235 178.128.149.138 178.128.147.116 178.128.144.61 178.128.144.69 178.128.148.166