Elevated Risk
Elevated threat level 8/10 for IP 206.189.233.36 from 18 reported incidents.
Behavioral profile indicates cyber threat activity with 56% confidence.
More threatening than 89% of monitored IPs
IP Address
206.189.233.36
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
US
Location
DIGITALOCEAN-ASN
ASN 14061
18
Reports
Mixed
Data Source
Threat Categories
Bad Web Bot
12
Web App Attack
8
Hacking
6
Port Scan
3
WP Config Exposure
3
DDoS Attack
2
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
23. September 2026
Last Activity
2. October 2026
Recent (7 days)
0 incidents
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
56%
High Confidence
Confidence History
1. Sep 2025 - 2. Oct 2026
56%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Hacking | Community | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| WP Cron Abuse DDoS Attack Port Scan +3 | Community x5 | 75% | |
| Hacking | Honeypot x40 | 75% | |
| WP Cron Abuse DDoS Attack WP Resource Exhaustion +2 | Community x5 | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% |
Technical Details
Basic Information
- IP Address
- 206.189.233.36
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
US
- ASN
- AS14061
- ISP
- DIGITALOCEAN-ASN
DNS Information
- Reverse DNS
- a957d52272.scan.leakix.org
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 1 Sep 2025
- Last Reported
- 2 Oct 2026, 06:42
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 840,673 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
18
avg: 9
++
Network Comparison
Compared against 24,708 IPs in ASN 14061
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 25
-
Network DIGITALOCEAN-ASN has overall threat level 4/10
Geographic Comparison
Compared against 149,453 IPs in US
Threat Level
8/10
country avg: 6.8
+
Total Reports
18
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
12
Web App Attack
8
Hacking
6
WP Config Exposure
3
Port Scan
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
764,206 threat incidents tracked globally • Last 24h: 30,396 Logs
FEED
Top Threat Sources
-
01
United States149,453 19.6% -
02
Brazil112,238 14.7%
-
03
India88,705 11.6%
-
04
China46,314 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,625 2.4%
-
07
Netherlands18,130 2.4%
-
08
Pakistan18,101 2.4%
-
09
Argentina16,409 2.1%
-
10
Colombia15,223 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
37
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
167.172.176.118
10/10
Confidence
100%
Reports
23
Location
DE
DE
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
159.65.5.51
10/10
Confidence
100%
Reports
21
Location
SG
SG
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
167.99.210.137
8/10
Confidence
100%
Reports
18
Location
NL
NL
174.138.12.72
10/10
Confidence
100%
Reports
17
Location
NL
NL
209.38.69.12
8/10
Confidence
100%
Reports
16
Location
US
US
159.65.224.88
10/10
Confidence
100%
Reports
15
Location
US
US
143.110.217.244
8/10
Confidence
100%
Reports
15
Location
CA
CA
209.38.120.71
10/10
Confidence
99%
Reports
18
Location
IN
IN
206.81.24.74
8/10
Confidence
99%
Reports
18
Location
DE
DE
188.166.29.60
10/10
Confidence
99%
Reports
16
Location
NL
NL
46.101.137.209
10/10
Confidence
99%
Reports
15
Location
DE
DE
147.182.149.75
8/10
Confidence
99%
Reports
14
Location
CA
CA
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
60
Location
NL
NL
IPs from the same subnet range, likely same network segment.
4
Related IPs
6.3/10
Avg Threat
15%
Avg Confidence
1
High Threat
Elevated risk: Multiple related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.180.230.8
8/10
Confidence
56%
Reports
5
Location
RU
RU
20.118.243.42
8/10
Confidence
56%
Reports
5
Location
US
US
34.76.115.6
10/10
Confidence
56%
Reports
4
Location
BE
BE
37.19.221.154
8/10
Confidence
56%
Reports
7
Location
US
US
47.83.235.182
8/10
Confidence
56%
Reports
5
Location
HK
HK
205.185.222.50
10/10
Confidence
56%
Reports
6
Location
DE
DE
185.198.240.75
8/10
Confidence
56%
Reports
10
Location
US
US
135.222.210.116
8/10
Confidence
56%
Reports
6
Location
US
US
222.165.187.3
10/10
Confidence
56%
Reports
5
Location
LK
LK
52.165.83.212
8/10
Confidence
56%
Reports
6
Location
US
US
34.67.222.22
8/10
Confidence
56%
Reports
5
Location
US
US
149.40.50.122
8/10
Confidence
56%
Reports
9
Location
US
US
161.248.217.23
10/10
Confidence
56%
Reports
69
Location
NP
NP
2.25.246.88
10/10
Confidence
56%
Reports
4
Location
US
US
176.65.149.178
10/10
Confidence
56%
Reports
4
Location
NL
NL