Notable Threat
IP 138.197.24.249 rated 8/10 from 17 verified reports.
Multiple security incidents attributed to this IP. Confidence: 74%.
More threatening than 89% of monitored IPs
IP Address
138.197.24.249
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
US
Location
DIGITALOCEAN-ASN
ASN 14061
17
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
12
Hacking
3
Port Scan
2
Bad Web Bot
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
26. September 2026
Last Activity
5. October 2026
Recent (7 days)
2 incidents
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
74%
High Confidence
Confidence History
10. Nov 2025 - 5. Oct 2026
74%
Current
Stable
Trend
Security Reports (17)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot | Honeypot | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 138.197.24.249
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS14061
- ISP
- DIGITALOCEAN-ASN
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 17
- First Reported
- 10 Nov 2025
- Last Reported
- 5 Oct 2026, 10:02
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,880 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
17
avg: 9
++
Network Comparison
Compared against 24,394 IPs in ASN 14061
Threat Level
8/10
network avg: 7.5
=
Total Reports
17
network avg: 25
-
Network DIGITALOCEAN-ASN has overall threat level 4/10
Geographic Comparison
Compared against 148,193 IPs in US
Threat Level
8/10
country avg: 6.8
+
Total Reports
17
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Oct 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Monday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
12
Hacking
3
Port Scan
2
Bad Web Bot
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
757,167 threat incidents tracked globally • Last 24h: 30,056 Logs
FEED
Top Threat Sources
-
01
United States148,193 19.6% -
02
Brazil111,856 14.8%
-
03
India87,184 11.5%
-
04
China46,075 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,398 2.4%
-
07
Netherlands17,986 2.4%
-
08
Pakistan17,818 2.4%
-
09
Argentina16,267 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
36
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
167.172.176.118
10/10
Confidence
100%
Reports
23
Location
DE
DE
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
159.65.5.51
10/10
Confidence
100%
Reports
21
Location
SG
SG
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
167.99.210.137
8/10
Confidence
100%
Reports
18
Location
NL
NL
174.138.12.72
10/10
Confidence
100%
Reports
17
Location
NL
NL
206.81.24.74
8/10
Confidence
100%
Reports
17
Location
DE
DE
209.38.69.12
8/10
Confidence
100%
Reports
16
Location
US
US
159.65.224.88
10/10
Confidence
100%
Reports
15
Location
US
US
143.110.217.244
8/10
Confidence
100%
Reports
15
Location
CA
CA
147.182.149.75
8/10
Confidence
100%
Reports
14
Location
CA
CA
209.38.120.71
10/10
Confidence
99%
Reports
18
Location
IN
IN
159.223.97.218
10/10
Confidence
99%
Reports
18
Location
US
US
188.166.29.60
10/10
Confidence
99%
Reports
16
Location
NL
NL
46.101.137.209
10/10
Confidence
99%
Reports
15
Location
DE
DE
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
IPs from the same subnet range, likely same network segment.
3
Related IPs
7/10
Avg Threat
4%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
74%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.218
10/10
Confidence
74%
Reports
296
Location
FR
FR
45.66.35.34
8/10
Confidence
74%
Reports
14
Location
NL
NL
74.82.47.3
10/10
Confidence
74%
Reports
981
Location
US
US
176.65.149.31
8/10
Confidence
74%
Reports
5,466
Location
NL
NL
152.32.172.108
10/10
Confidence
74%
Reports
3,053
Location
HK
HK
209.38.131.131
8/10
Confidence
74%
Reports
11,749
Location
US
US
45.148.10.64
8/10
Confidence
74%
Reports
31
Location
NL
NL
2a01:4f8:c012:4640::1
10/10
Confidence
74%
Reports
49,749
Location
DE
DE
207.90.244.27
8/10
Confidence
74%
Reports
16,733
Location
US
US
165.154.51.27
10/10
Confidence
74%
Reports
176
Location
TH
TH
91.230.168.171
8/10
Confidence
74%
Reports
301
Location
US
US
91.230.168.73
10/10
Confidence
74%
Reports
295
Location
US
US
152.32.206.64
8/10
Confidence
74%
Reports
78
Location
US
US
179.43.133.154
10/10
Confidence
74%
Reports
5,480
Location
CH
CH
139.59.170.85
8/10
Confidence
74%
Reports
8,854
Location
GB
GB