Report for IP: 206.189.220.72

Threat LevelHIGH55/1001 rule type
4 incidents on record · confirmed on global blocklist · persistent 8-day campaign · last seen 8d ago · known internet scanner
PTR prod-beryllium-sfo2-37.do.binaryedge.ninja
Org / ASN DigitalOcean, LLC
Country 🇺🇸 United States
City Santa Clara, California
Timezone America/Los_Angeles
Internet ScannerBinaryedge
BinaryEdge — commercial threat intelligence company performing continuous internet-wide port scans. Data used to build attack surface maps. All unsolicited scanning probes are treated as hostile traffic on this network regardless of stated purpose.

Attack Analysis

🇺🇸 United States · Santa Clara · 14061 · Digitalocean, LLC
IDS: Threat Intel — CINS Active Threat
This IP appears in the CINS (Collective Intelligence Network Security) Active Threat Intelligence feed — a real-time blocklist of IPs with poor reputation scores derived from observed malicious activity. CINS-listed IPs are actively engaged in attacks at the time of detection.

Reports (4)

Date Severity Description
23 Jul 2026 - 17:07 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 285
19 Jul 2026 - 22:46 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 285
16 Jul 2026 - 14:22 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 285
15 Jul 2026 - 17:49 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 285