IPMediumSignal 18/100
209.38.165.178
Location
United KingdomSlough, England
ASN
AS14061
DigitalOcean, LLC
First Seen
Oct 2, 2024
Last Seen
May 10, 2026
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
18%
Signal Score
18 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited Kingdom
United KingdomRegionSlough, England
ASNAS14061
OrganizationDigitalOcean, LLC
Feed Intelligence Summary
13 reports18% confidence
13
Source reports
18%
Confidence score
Category tags
abuseactive scanactive scanningapplication layer protocolaptattackauto-generated securityautomated brute forceautomated scanbad reputationbotnetbotnet activitybrute forcebrute force attackc2c2 communicationc2 servercommand & controlcommand and controlcommunication protocolcompromised hostcompromised hostscredential accesscredential harvestingcredential phishingcredential stuffingdata exfiltrationdata store exposuredata theftdatabase securityddosdirectory traversaldistributed attackseuropeexploit kit activityexploitation activityform submissiongbhoneytrap honeypothttp scannerhttpsidentity & access exploitationindicatorinformation gatheringinitial accessinjection activityinjection attacksioclamplogin page phishinglogin panelmalicious activitymalicious softwaremalwaremalware distributionmanualnetworknetwork layer protocolnetwork probingnetwork scanningnetwork traffic analysisnorth americaopen directoryowasp top 10password attacksphishingphishing attackphishing attack detectionphishing campaign detectionprocess injectionreconnaissanceresearchedscannerscanning activityscripting attacksself-signedshodansocial engineeringspamt1001t1005t1055t1059t1059.001t1059.003t1059.007t1068t1071t1071.001t1078t1078.001t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1199t1203t1213t1486t1496t1499.002t1499.003t1539t1565t1566t1566.001t1566.002t1566.003t1573t1573.001t1589t1595t1595.001t1595.002t1595.003t1598t1598.003telecommunicationsthreat actorthreat detectiontor nodeunauthorized accessunauthorized access attemptsunited kingdomunited kingdom of great britain and northern irelandunited statesvulnerability scanweb application attackweb application scanweb attackweb brute forceweb exploitationweb phishingweb shell detectionweb trafficxss
Activity Timeline
May 10May 10
Threat Activity Heatmap
· Peak: 2026-05-10LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
18
SIGNAL
Signal Score
18%
Confidence
13
Reports
First seenOct 2, 2024
Last seenMay 10, 2026
GeolocationGB
CountryUnited Kingdom
LocationSlough, England
ASNAS14061
OrgDigitalOcean, LLC
Coords51.4193, -0.0785
VirusTotal
Not checked
WHOIS
- description
- Imported indicator
- raw
- inetnum: 209.36.0.0 - 209.41.255.255 netname: NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK descr: IPv4 address block not managed by the RIPE NCC remarks: ------------------------------------------------------ remarks: remarks: For registration information, remarks: you can consult the following sources: remarks: remarks: IANA remarks: http://www.iana.org/assignments/ipv4-address-space remarks: http://www.iana.org/assignments/iana-ipv4-special-registry remarks: http://www.iana.org/assignments/ipv4-recovered-address-space remarks: remarks: AFRINIC (Africa) remarks: http://www.afrinic.net/ whois.afrinic.net remarks: remarks: APNIC (Asia Pacific) remarks: http://www.apnic.net/ whois.apnic.net remarks: remarks: ARIN (Northern America) remarks: http://www.arin.net/ whois.arin.net remarks: remarks: LACNIC (Latin America and the Carribean) remarks: http://www.lacnic.net/ whois.lacnic.net remarks: remarks: ------------------------------------------------------ country: EU # Country is really world wide admin-c: IANA1-RIPE tech-c: IANA1-RIPE status: ALLOCATED UNSPECIFIED mnt-by: RIPE-NCC-HM-MNT created: 2021-10-12T15:20:43Z last-modified: 2021-10-12T15:20:43Z source: RIPE role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-RIPE tech-c: IANA1-RIPE nic-hdl: IANA1-RIPE remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: RIPE-NCC-MNT created: 1970-01-01T00:00:00Z last-modified: 2001-09-22T09:31:27Z source: RIPE # Filtered
- references
- https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt, https://threatfox.abuse.ch/export/csv/recent/
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 month ago
Appeared in 13 threat reports