Extreme Threat
IP 188.166.68.32 classified at threat level 10/10 with 352 documented attacks.
Advanced threat indicators confirmed with 0% certainty.
More threatening than 90% of monitored IPs
IP Address
188.166.68.32
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
NL
Location
DIGITALOCEAN-ASN
ASN 14061
352
Reports
Honeypot
Data Source
Threat Categories
SSH
19
Hacking
11
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
20. Jan 2026
0%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 188.166.68.32
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
NL
- ASN
- AS14061
- ISP
- DIGITALOCEAN-ASN
DNS Information
- Reverse DNS
- easybot-staging-1bd253c4.mongo.ondigitalocean.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 352
- First Reported
- 20 Jan 2026
- Last Reported
- 20 Jan 2026, 23:43
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 844,767 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
352
avg: 9
++
Network Comparison
Compared against 24,810 IPs in ASN 14061
Threat Level
10/10
network avg: 7.5
+
Total Reports
352
network avg: 25
++
Network DIGITALOCEAN-ASN has overall threat level 4/10
Geographic Comparison
Compared against 18,195 IPs in NL
Threat Level
10/10
country avg: 6.3
++
Total Reports
352
country avg: 30
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
352 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
290
SSH
62
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 352 reports
Weekly Activity
Geographic Threat Distribution
767,699 threat incidents tracked globally • Last 24h: 29,008 Logs
FEED
Top Threat Sources
-
01
United States150,088 19.6% -
02
Brazil112,550 14.7%
-
03
India89,132 11.6%
-
04
China46,440 6%
-
05
SC29,263 3.8%
-
06
Germany18,735 2.4%
-
07
Pakistan18,221 2.4%
-
08
Netherlands18,195 2.4%
-
09
Argentina16,534 2.2%
-
10
Colombia15,279 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
37
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
167.172.176.118
10/10
Confidence
100%
Reports
23
Location
DE
DE
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
159.65.5.51
10/10
Confidence
100%
Reports
21
Location
SG
SG
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
174.138.12.72
10/10
Confidence
100%
Reports
17
Location
NL
NL
159.65.224.88
10/10
Confidence
100%
Reports
15
Location
US
US
143.110.217.244
8/10
Confidence
100%
Reports
15
Location
CA
CA
209.38.120.71
10/10
Confidence
99%
Reports
18
Location
IN
IN
167.99.210.137
8/10
Confidence
99%
Reports
18
Location
NL
NL
209.38.69.12
8/10
Confidence
99%
Reports
16
Location
US
US
46.101.137.209
10/10
Confidence
99%
Reports
15
Location
DE
DE
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
61
Location
NL
NL
167.99.207.12
10/10
Confidence
98%
Reports
18
Location
GB
GB
206.81.24.74
8/10
Confidence
98%
Reports
18
Location
DE
DE
104.248.160.169
8/10
Confidence
98%
Reports
16
Location
GB
GB
IPs from the same subnet range, likely same network segment.
4
Related IPs
6.5/10
Avg Threat
29%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.236
8/10
Confidence
100%
Reports
156
ISP
TechTies Inc.
94.154.43.203
8/10
Confidence
100%
Reports
103
ISP
Storm Industrie...
94.154.43.223
8/10
Confidence
100%
Reports
55
ISP
Storm Industrie...
34.187.109.111
8/10
Confidence
100%
Reports
47
ISP
Google LLC
45.156.87.44
10/10
Confidence
100%
Reports
38
ISP
Pfcloud UG (haf...
35.204.212.239
8/10
Confidence
100%
Reports
30
ISP
Google LLC
34.141.181.0
10/10
Confidence
100%
Reports
26
ISP
Google LLC
94.154.43.70
8/10
Confidence
100%
Reports
26
ISP
Storm Industrie...
20.229.185.186
10/10
Confidence
100%
Reports
24
ISP
Microsoft Corpo...
174.138.12.72
10/10
Confidence
100%
Reports
17
ISP
DigitalOcean, LLC
51.124.186.154
8/10
Confidence
100%
Reports
14
ISP
Microsoft Corpo...
94.154.43.129
8/10
Confidence
100%
Reports
14
ISP
Storm Industrie...
34.141.165.52
10/10
Confidence
100%
Reports
13
ISP
Google LLC
94.154.43.63
8/10
Confidence
100%
Reports
13
ISP
Storm Industrie...
94.154.43.74
8/10
Confidence
100%
Reports
12
ISP
Storm Industrie...