AS14061 DigitalOcean, LLC

Abuse reported against IP addresses announced by autonomous system 14061. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 12,522 IP addresses in AS14061 DigitalOcean, LLC were reported for abuse, in 20,398 reports altogether. 2 of them (0%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Web Spam, Brute-Force and Command & Control. Most of them are in United States.

12,522addresses reported, 30 days

2on the default blocklist (75+)

20,398reports against them

1 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇩🇪165.245.208.67	77	10	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	1 h
🇮🇳68.183.92.206	75	10	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇺🇸138.68.28.126	74	6	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	9 h
🇺🇸162.243.147.237	73	9	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇩🇪209.38.213.186	72	7	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇸🇬159.223.59.82	72	10	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇺🇸137.184.179.158	72	9	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇳🇱178.128.251.47	71	9	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control HTTP Flood	1 h
🇺🇸137.184.78.203	71	10	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control HTTP Flood	1 h
🇩🇪134.122.86.156	71	8	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control HTTP Flood	1 h
🇸🇬168.144.250.155	71	8	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	1 h
🇮🇳139.59.83.112	71	12	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control HTTP Flood	1 h
🇺🇸134.209.120.216	71	9	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	1 h
🇺🇸201.79.20.106	71	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇸🇬168.144.248.118	71	7	DNS Poisoning FTP Brute-Force Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	7 h
🇺🇸165.232.58.129	71	6	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Credential Stuffing Vulnerability Scan Command & Control HTTP Flood	7 h
🇬🇧167.99.206.188	71	8	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control HTTP Flood	7 h
🇩🇪165.245.219.84	70	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇺🇸165.245.199.7	70	10	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇺🇸134.199.209.2	70	8	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h

What they were reported for

Where they are

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 13 minutes ago.