178.128.248.119
Classification: Suspicious
178.128.248.119 is a suspicious IP address in Amsterdam, NL. Linked to Revil malware. 58 sightings from 4 threat sources (Proxy), last seen 2026-10-14.
Current activity
- Open proxy — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: REVIL (S0496)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Proxy | IPWhois.io | 2025-12-12 00:33:49 | 2026-10-14 08:30:38 | anonymization proxy | |
| Proxy | FireHOL | 2023-01-02 10:42:26 | 2025-10-06 22:14:33 | anonymization | |
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2020-02-20 17:30:14 | 2020-03-04 02:00:29 | S0496 REvil | |
| DDoS Attacker | Blocklist.net.ua | 2019-05-15 01:13:49 | 2019-11-15 07:20:42 |
Tags
anonymization abuseWhois information
- AS name
- AS14061 DigitalOcean, LLC
- Registrant
- DigitalOcean, LLC
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2019-05-14 10:18:38
- Last updated
- 2026-10-14 08:30:39