IPMediumSignal 31/100
178.128.28.178
Location
SingaporeSingapore, South West
ASN
AS14061
Digitalocean
First Seen
Oct 21, 2024
Last Seen
Apr 6, 2026
Found in 18 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
31%
Signal Score
31 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountrySingapore
SingaporeRegionSingapore, South West
ASNAS14061
OrganizationDigitalocean
IP Category
⟲
Proxy
Proxy server
Feed Intelligence Summary
18 reports31% confidence
18
Source reports
31%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningasiaattackauthenticationbad reputationblacklist candidateblacklist ipbotnetbotnet activitybrute forcebrute force attackcommand and controlcommunication protocolcredential accesscredential stuffingdata exfiltrationdata store exposureddosddos attacksdecoy systemdistributed attacksexploitation activityftpftp brute forcehttp brute forcehttp scannerhydraidentity & access exploitationinjection activityinternet of thingsintrusion detectioniot botnetiot securityiot/ics attacklogin attemptsmalicious activitymalicious scanmalicious softwaremalwaremasscanmedusamirai botnetnetworknetwork attacksnetwork intrusionnetwork reconnaissancenetwork scanningnetwork securitynmappassword attacksprocess injectionprotocol exploitationproxyproxy protocolransomwarereconnaissancereconnaissance activityremote accessremote servicesresearchedscanscannersecurity policyservice probingservice scansingaporesql injection attemptssh attackt1016t1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1068t1071t1071.001t1076t1078t1083t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.001t1499.002t1499.003t1563t1565t1589t1592t1595t1595.001t1595.002t1595.003targeting databasetcp protocoltelnet threatthreat actorthreat intelligencethreat preventiontor nodeunited kingdomunited statesweb traffic
Activity Timeline
Apr 6Apr 6
Threat Activity Heatmap
· Peak: 2026-04-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
31
SIGNAL
Signal Score
31%
Confidence
18
Reports
First seenOct 21, 2024
Last seenApr 6, 2026
GeolocationSG
CountrySingapore
LocationSingapore, South West
ASNAS14061
OrgDigitalocean
Coords1.3078, 103.6818
Proxy
VirusTotal
Not checked
WHOIS
- description
- Scans hitting the server at TCP port 8080 HTTP and PROXY. Same IP should not appear more than once in 96 hours in our lists S3#.
- raw
- inetnum: 178.0.0.0 - 178.255.255.255 netname: IANA-NETBLOCK-178 descr: This network range is not allocated to APNIC. descr: descr: If your whois search has returned this message, then you have descr: searched the APNIC whois database for an address that is descr: allocated by another Regional Internet Registry (RIR). descr: descr: Please search the other RIRs at whois.arin.net or whois.ripe.net descr: for more information about that range. country: AU admin-c: IANA1-AP tech-c: IANA1-AP remarks: For general info on spam complaints email [email protected]. remarks: For general info on hacking & abuse complaints email [email protected]. mnt-by: MAINT-APNIC-AP mnt-lower: MAINT-APNIC-AP status: ALLOCATED PORTABLE last-modified: 2008-09-04T06:51:29Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 2 months ago
Appeared in 18 threat reports