DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

ASN REPORT — AS14061 · DigitalOcean, LLC

First sighted: April 30, 2023, 3 a.m. · Last sighted: Jan. 11, 2026, 1:59 a.m.

Risk
100 (high)
Total hits
1031537
Total errors
257175
Observed IPs
17310
Top country
N/A
Top city
N/A

Risk

Model: v1 Computed: 2026-01-18 11:55:27
Risk score
100
High
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Key drivers
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 15315
Points 107549.49
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 2715
Points 18848.30
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 5544
Points 9290.20
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 3735
Points 8703.69
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 434
Points 8375.94
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 32172
Points 3296.15
SQL injection attempts
Input patterns resemble attempts to manipulate SQL queries via application parameters.
sqli
Hits 73
Points 1360.08
HTTP method anomaly
Unusual or unexpected HTTP methods observed for the target endpoints.
method
Hits 3050
Points 1173.49
Firewall probing
Traffic behavior suggests probing of access controls and protected surfaces.
fwprobe
Hits 52
Points 532.17
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 722
Points 488.36

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this ASN.

Loading activity…
Daily activity (hits per day). Total in window: —.
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
590427
3xx
151040
4xx
250849
5xx
6326
Unique URLs
43544
Total hits
1031537
First seen
April 30, 2023, 3 a.m.
Last seen
Jan. 11, 2026, 1:59 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Sensitive file probing sfp
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 15315 pts 107549.49
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 9892 1 80085.63 July 6, 2023, 8:13 p.m. Jan. 10, 2026, 1:09 a.m.
sensitive_file 9892
24 3038 1 13153.32 July 7, 2023, 5:11 a.m. Jan. 9, 2026, 2:29 p.m.
sensitive_file 3038
34 974 1 6265.55 Aug. 4, 2023, 5:54 a.m. Dec. 17, 2025, 12:19 p.m.
sensitive_file 974
44 370 1 3366.70 Oct. 18, 2023, 2:35 a.m. Oct. 11, 2025, 4:24 a.m.
sensitive_file 370
36 309 1 2147.43 Sept. 21, 2023, 11:46 a.m. Dec. 17, 2025, 5:14 p.m.
sensitive_file 309
22 334 1 1260.92 Sept. 19, 2023, 9:37 p.m. July 29, 2025, 5:41 a.m.
sensitive_file 334
16 268 1 660.35 Sept. 5, 2023, 3:28 p.m. Nov. 15, 2025, 12:11 p.m.
sensitive_file 268
30 89 1 499.29 Oct. 6, 2024, 4:09 a.m. July 29, 2025, 5:41 a.m.
sensitive_file 89
42 9 1 76.51 Oct. 6, 2024, 4:08 a.m. Oct. 6, 2024, 4:09 a.m.
sensitive_file 9
8 32 1 33.79 Oct. 18, 2023, 4:05 a.m. April 16, 2025, 7:27 a.m.
sensitive_file 32
Path traversal attempts trav
Request paths/parameters resemble attempts to access files outside intended directories.
hits 2715 pts 18848.30
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
26 965 1 5871.06 Aug. 4, 2023, 5:54 a.m. Dec. 17, 2025, 12:19 p.m.
trav 965
28 781 1 5230.83 Oct. 18, 2023, 4:05 a.m. Dec. 17, 2025, 12:19 p.m.
trav 781
34 599 1 5030.40 July 7, 2023, 6:35 p.m. Oct. 11, 2025, 4:24 a.m.
trav 599
30 326 1 2371.90 Oct. 18, 2023, 6:28 a.m. Dec. 17, 2025, 12:19 p.m.
trav 326
32 44 1 344.12 Oct. 18, 2023, 6:18 a.m. Oct. 11, 2025, 4:24 a.m.
trav 44
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 5544 pts 9290.20
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
16 494 1 1195.78 July 18, 2023, 9:50 a.m. July 31, 2025, 2:37 p.m.
scan_velocity 494
12 568 1 1027.08 July 11, 2023, 9:44 p.m. Nov. 6, 2025, 1:28 a.m.
scan_velocity 568
22 294 1 1010.99 Sept. 21, 2023, 11:46 a.m. Nov. 6, 2025, 7:30 p.m.
scan_velocity 294
10 642 1 873.18 May 8, 2023, 10:04 p.m. Nov. 6, 2025, 3:05 a.m.
scan_velocity 642
14 409 1 869.78 July 13, 2023, 4:21 a.m. July 31, 2025, 2:37 p.m.
scan_velocity 409
20 276 1 865.98 Dec. 10, 2023, 2:36 a.m. Nov. 6, 2025, 7:29 p.m.
scan_velocity 276
18 301 1 844.67 July 7, 2023, 5:11 a.m. Nov. 6, 2025, 7:29 p.m.
scan_velocity 301
36 92 1 513.22 Sept. 18, 2023, 10:14 a.m. July 30, 2025, 4:52 p.m.
scan_velocity 92
28 108 1 458.14 Feb. 25, 2024, 4:38 a.m. July 30, 2025, 4:52 p.m.
scan_velocity 108
24 116 1 426.38 Dec. 18, 2023, 8:45 a.m. Nov. 6, 2025, 7:30 p.m.
scan_velocity 116
32 80 1 365.18 May 11, 2024, 2:10 p.m. July 30, 2025, 4:52 p.m.
scan_velocity 80
34 56 1 296.82 Sept. 18, 2023, 10:14 a.m. July 30, 2025, 4:52 p.m.
scan_velocity 56
30 64 1 283.50 May 11, 2024, 2:10 p.m. July 30, 2025, 4:52 p.m.
scan_velocity 64
26 67 1 259.51 Dec. 18, 2023, 8:45 a.m. July 29, 2025, 5:41 a.m.
scan_velocity 67
0 1977 1 0.00 May 8, 2023, 10:04 p.m. Nov. 6, 2025, 7:30 p.m.
scan_velocity 1977
Credential brute forcing cred
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 3735 pts 8703.69
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 1706 1 6605.72 April 30, 2023, 6:50 a.m. Nov. 23, 2025, 9:30 p.m.
cred 1706
12 239 1 1188.99 July 22, 2023, 2:54 a.m. Nov. 6, 2025, 8:07 a.m.
cred 239
8 215 1 650.10 July 16, 2023, 8:28 p.m. Nov. 23, 2025, 9:30 p.m.
cred 215
6 101 1 199.98 June 16, 2023, 11:58 a.m. March 10, 2025, 12:43 a.m.
cred 101
14 9 1 58.91 July 22, 2023, 2:54 a.m. Oct. 31, 2023, 4:52 p.m.
cred 9
0 1465 1 0.00 April 30, 2023, 6:50 a.m. Nov. 23, 2025, 9:30 p.m.
cred 1465
Command injection attempts cmdi
Request content resembles attempts to execute OS commands via an application.
hits 434 pts 8375.94
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 266 1 5571.10 Oct. 18, 2023, 8:10 a.m. Nov. 23, 2025, 9:30 p.m.
cmdi 266
22 118 1 1655.51 Oct. 18, 2023, 9:36 a.m. Nov. 23, 2025, 9:30 p.m.
cmdi 118
30 48 1 1113.84 Oct. 18, 2023, 8:02 a.m. April 16, 2025, 7:27 a.m.
cmdi 48
25 2 1 35.49 Oct. 19, 2023, 5:40 a.m. Oct. 19, 2023, 8:06 a.m.
cmdi 2
User-Agent anomaly ua
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 32172 pts 3296.15
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 10272 1 1086.23 July 6, 2023, 12:09 a.m. Jan. 10, 2026, 1:04 a.m.
ua 10272
6 14046 1 1011.31 April 30, 2023, 5:33 p.m. Dec. 31, 2025, 2:30 p.m.
ua 14046
10 6878 1 990.43 July 6, 2023, 8:13 p.m. Jan. 10, 2026, 2:14 a.m.
ua 6878
14 694 1 155.46 Aug. 1, 2023, 3:03 p.m. Jan. 9, 2026, 11:45 p.m.
ua 694
12 282 1 52.71 Aug. 5, 2023, 12:26 a.m. Nov. 6, 2025, 3:04 a.m.
ua 282
SQL injection attempts sqli
Input patterns resemble attempts to manipulate SQL queries via application parameters.
hits 73 pts 1360.08
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
32 23 1 677.12 Oct. 18, 2023, 6:33 a.m. Oct. 19, 2023, 8:30 a.m.
sqli 23
30 12 1 324.00 Oct. 18, 2023, 7:15 a.m. Oct. 19, 2023, 7:08 a.m.
sqli 12
18 11 1 142.56 Oct. 18, 2023, 6:33 a.m. Oct. 19, 2023, 7:08 a.m.
sqli 11
24 5 1 98.40 Oct. 18, 2023, 7:08 p.m. Oct. 18, 2023, 7:24 p.m.
sqli 5
8 20 1 88.00 Oct. 18, 2023, 8:48 a.m. Oct. 19, 2023, 8:30 a.m.
sqli 20
20 2 1 30.00 Oct. 29, 2023, 8:57 p.m. Jan. 1, 2024, 6:59 p.m.
sqli 2
HTTP method anomaly method
Unusual or unexpected HTTP methods observed for the target endpoints.
hits 3050 pts 1173.49
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
8 2378 1 970.22 May 7, 2023, 2:42 p.m. Oct. 22, 2025, 11:38 a.m.
method 2378
10 278 1 153.46 July 18, 2023, 3:09 p.m. Dec. 17, 2025, 12:51 a.m.
method 278
3 393 1 49.52 June 21, 2023, 9:04 p.m. Nov. 30, 2025, 3:19 a.m.
method 393
6 1 1 0.30 Dec. 17, 2025, 12:34 p.m. Dec. 17, 2025, 12:34 p.m.
method 1
Firewall probing fwprobe
Traffic behavior suggests probing of access controls and protected surfaces.
hits 52 pts 532.17
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
24 35 1 309.96 July 11, 2023, 9:42 p.m. Oct. 7, 2025, 8:46 a.m.
fwprobe 35
32 15 1 198.72 Oct. 19, 2023, 4:47 a.m. Jan. 31, 2024, 1:02 p.m.
fwprobe 15
30 1 1 12.15 July 31, 2025, 10:16 p.m. July 31, 2025, 10:16 p.m.
fwprobe 1
28 1 1 11.34 Oct. 18, 2023, 11:58 a.m. Oct. 18, 2023, 11:58 a.m.
fwprobe 1
Protocol anomaly proto
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 722 pts 488.36
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
11 294 1 181.10 Aug. 25, 2023, 3:25 p.m. Aug. 26, 2025, 6:49 a.m.
proto 294
12 250 1 172.80 Sept. 23, 2023, 9:04 a.m. Dec. 17, 2025, 12:19 p.m.
proto 250
24 67 1 118.35 Oct. 18, 2023, 4:05 a.m. Feb. 19, 2024, 12:47 a.m.
proto 67
3 110 1 14.52 June 21, 2023, 9:04 p.m. Sept. 17, 2025, 5:14 a.m.
proto 110
22 1 1 1.58 June 21, 2023, 9:04 p.m. June 21, 2023, 9:04 p.m.
proto 1
Header injection attempts hdrinj
Input patterns suggest attempts to manipulate headers or downstream header parsing.
hits 21 pts 365.26
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
24 20 1 345.60 Oct. 18, 2023, 11:10 a.m. Feb. 19, 2024, 5:07 a.m.
hdrinj 20
27 1 1 19.66 Oct. 19, 2023, 5:12 a.m. Oct. 19, 2023, 5:12 a.m.
hdrinj 1
Automated client behavior bot
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 393 pts 185.38
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 387 1 183.82 July 28, 2023, 1:24 a.m. Nov. 6, 2025, 3:04 a.m.
bot 387
8 6 1 1.56 April 16, 2024, 3:47 a.m. May 14, 2024, 1:45 a.m.
bot 6
Request size anomaly request_size
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 247 pts 121.19
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
14 188 1 110.43 July 16, 2023, 7:19 p.m. Nov. 25, 2025, 11:16 a.m.
request_size 188
12 23 1 10.76 July 16, 2023, 1:25 p.m. Dec. 31, 2024, 10:05 p.m.
request_size 23
0 36 1 0.00 Dec. 31, 2024, 10:05 p.m. May 21, 2025, 7:36 p.m.
request_size 36
General injection attempts injg
Suspicious input patterns consistent with injection-like probing across multiple families.
hits 5 pts 89.88
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
30 2 1 36.12 Oct. 19, 2023, 3:51 a.m. Oct. 19, 2023, 3:51 a.m.
injg 2
34 1 1 21.90 Oct. 18, 2023, 5:37 p.m. Oct. 18, 2023, 5:37 p.m.
injg 1
31 1 1 19.10 Feb. 21, 2024, 4:46 p.m. Feb. 21, 2024, 4:46 p.m.
injg 1
24 1 1 12.77 Oct. 18, 2023, 8:59 p.m. Oct. 18, 2023, 8:59 p.m.
injg 1
Referrer abuse ref
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
hits 423 pts 73.79
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
9 191 1 43.83 April 30, 2023, 6:50 a.m. April 16, 2025, 7:27 a.m.
ref 191
6 221 1 27.85 July 12, 2023, 10:10 a.m. June 23, 2025, 4:36 a.m.
ref 221
8 11 1 2.11 Oct. 18, 2023, 9:43 a.m. March 10, 2025, 12:44 a.m.
ref 11

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Auto-loads a single aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this ASN snapshot (peer IPs with coordinates).

Loading map…

SUBNETS HELD BY THIS ISP

Derived from ISP snapshot peers (Option A). Grouped into IPv4 /24 and IPv6 /48 by default.
IPv4
IPv6
Limit
Loading subnets…

Interesting IPs

Top risky peers inside this ASN (latest snapshot). Sorted by risk score, then hits.

No peer rows available for this ASN snapshot.