167.172.150.24

Classification: Malicious

167.172.150.24 is a malicious IP address in North Bergen, US. 863 sightings from 9 threat sources (Port Scanner, Malicious Host), last seen 2026-10-16.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2022-09-13 03:32:48 2026-10-16 16:33:24 attacker malicious-activity reconnaissance
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-08-28 09:14:01 2026-10-15 11:14:59 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-08-28 09:13:59 2026-10-15 11:14:57 attacker malicious-activity
Malicious Host CIArmy 2026-08-31 20:01:58 2026-10-09 20:05:18 attacker malicious-activity
Port Scanner AbuseIPDB 2026-08-25 17:28:23 2026-10-09 14:29:59 attacker malicious-activity reconnaissance
HTTP Attacker AbuseIPDB 2026-09-04 15:26:31 2026-10-08 22:27:10 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-09-02 02:18:55 2026-10-08 22:27:10 attacker malicious-activity
Hacking AbuseIPDB 2026-08-26 04:56:32 2026-10-08 22:01:48 attacker malicious-activity
Bruteforce AbuseIPDB 2026-08-27 19:24:05 2026-10-08 09:00:02 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-09-12 23:06:11 2026-10-04 09:00:24 attacker malicious-activity
Mail Spammer AbuseIPDB 2026-09-15 11:53:12 2026-09-26 22:32:53 attacker malicious-activity
Malicious Host AbuseIPDB 2026-08-28 14:19:21 2026-09-25 14:14:29 attacker compromised malicious-activity
DDoS Attacker AbuseIPDB 2026-09-04 02:37:00 2026-09-04 02:37:00 attacker malicious-activity
Proxy FireHOL 2023-01-02 06:05:49 2024-05-07 04:01:32 anonymization
SSH Attacker Blocklist.de 2022-08-20 02:16:35 2024-03-13 04:09:31 malicious-activity
SSH Attacker Blocklist.net.ua 2023-04-13 07:26:30 2023-10-12 06:31:31 malicious-activity
Malicious Host HoneyDB 2022-09-30 00:00:00 2023-07-05 00:00:00 malicious-activity
SIP Attacker Blocklist.de 2023-03-03 02:54:17 2023-06-11 03:45:06 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP Emerging Threats 2022-12-14 02:26:56 2023-02-06 08:52:03 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP Emerging Threats 2022-12-14 02:26:54 2023-02-06 08:52:00 malicious-activity
Bruteforce login attacker Blocklist.de 2022-12-13 01:49:09 2022-12-13 01:49:09 malicious-activity
HTTP Attacker Blocklist.de 2022-12-10 01:52:12 2022-12-10 01:52:12 malicious-activity
Anonymizer Maltiverse Research Team 2020-11-22 01:16:00 2021-05-23 16:58:30 anonymizer
Anonymizer Maltiverse 2020-08-02 10:40:38 2020-08-02 10:40:38

Tags

abuse anonymization ssh bruteforce bot sip attacker login joomla wordpress apache ddos rfi anonymizer

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
ripencc
AS date
1993-08-30 00:00:00
AS CIDR
167.172.144.0/20
CIDR
167.172.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Avenue of the Americas, 10th Floor New York 10013 UNITED STATES
City
North Bergen
State
NJ
Postal code
07047
Country
US — United States 🇺🇸
First indexed
2020-08-02 10:40:38
Last updated
2026-10-16 16:33:24

Malicious IPs in the same CIDR

167.172.148.89 167.172.157.30 167.172.150.173 167.172.157.153 167.172.156.208 167.172.150.24 167.172.148.206 167.172.153.212 167.172.157.17 167.172.158.128 167.172.145.231 167.172.157.217 167.172.148.222 167.172.155.27 167.172.153.2 167.172.158.160 167.172.158.20 167.172.144.9 167.172.146.21 167.172.158.84 167.172.149.163