167.172.146.21
Classification: Malicious
167.172.146.21 is a malicious IP address in North Bergen, US. Linked to Icedid malware. 90 sightings from 5 threat sources, last seen 2026-10-03.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-09-22 16:10:10 | 2026-10-03 16:11:28 | attacker malicious-activity reconnaissance | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-09-22 09:13:44 | 2026-09-22 09:13:44 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-09-22 09:13:42 | 2026-09-22 09:13:42 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-09-20 07:38:04 | 2026-09-22 05:01:25 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-09-20 06:57:54 | 2026-09-21 23:49:56 | attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-09-20 06:57:54 | 2026-09-21 22:42:47 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-21 01:45:45 | 2026-09-21 01:45:45 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-09-20 08:40:47 | 2026-09-20 22:07:18 | attacker compromised malicious-activity | |
| Malicious Host | CIArmy | 2026-09-20 20:02:22 | 2026-09-20 20:02:22 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-09-20 16:44:01 | 2026-09-20 16:44:01 | attacker malicious-activity | |
| IcedID | ThreatFox Abuse.ch | 2021-11-04 00:12:44 | 2021-11-04 00:12:44 | malicious-activity | S0483 IcedID |
Tags
icedid port:443 bokbot iceid abuseWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- ripencc
- AS date
- 1993-08-30 00:00:00
- AS CIDR
- 167.172.144.0/20
- Registrant
- DigitalOcean, LLC
- City
- North Bergen
- State
- NJ
- Postal code
- 07047
- Country
- US — United States 🇺🇸
- First indexed
- 2021-11-04 00:12:44
- Last updated
- 2026-10-03 16:11:28
Malicious IPs in the same CIDR
167.172.157.30 167.172.150.173 167.172.157.153 167.172.156.208 167.172.150.24 167.172.148.206 167.172.153.212 167.172.148.89 167.172.157.17 167.172.158.128 167.172.145.231 167.172.157.217 167.172.148.222 167.172.155.27 167.172.153.2 167.172.158.160 167.172.158.20 167.172.144.9 167.172.146.21 167.172.158.84 167.172.149.163