167.172.145.231
Classification: Malicious
167.172.145.231 is a malicious IP address in North Bergen, US. 12 sightings from 6 threat sources (SSH Attacker), last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-10-07 16:04:08 | 2026-10-16 16:33:24 | attacker malicious-activity reconnaissance | |
| Malicious Host | HoneyDB | 2020-03-12 00:00:00 | 2026-10-07 00:00:00 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2020-03-12 00:49:28 | 2026-04-25 10:10:49 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-02-12 13:42:59 | 2026-02-12 13:42:59 | anomalous-activity | |
| SSH Attacker | Telefonica CO SOC | 2020-03-17 11:58:02 | 2020-05-14 09:58:06 | ||
| SIP Attacker | Blocklist.de | 2020-05-13 07:53:01 | 2020-05-14 07:55:35 | ||
| Malicious host | Darklist | 2020-03-26 01:42:28 | 2020-03-26 01:42:28 |
Tags
ssh bruteforce bot sip attacker abuseWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- ripencc
- AS date
- 1993-08-30 00:00:00
- AS CIDR
- 167.172.144.0/20
- CIDR
- 167.172.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Avenue of the Americas, 10th Floor New York 10013 UNITED STATES
- City
- North Bergen
- State
- NJ
- Postal code
- 07047
- Country
- US — United States 🇺🇸
- First indexed
- 2020-03-12 00:49:28
- Last updated
- 2026-10-16 16:33:24
Malicious IPs in the same CIDR
167.172.157.30 167.172.150.173 167.172.157.153 167.172.156.208 167.172.150.24 167.172.148.206 167.172.153.212 167.172.148.89 167.172.157.17 167.172.158.128 167.172.145.231 167.172.157.217 167.172.148.222 167.172.155.27 167.172.153.2 167.172.158.160 167.172.158.20 167.172.144.9 167.172.146.21 167.172.158.84 167.172.149.163