167.172.153.212
Classification: Malicious
167.172.153.212 is a malicious IP address in North Bergen, US. 190 sightings from 9 threat sources (Proxy, Port Scanner), last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-10-01 16:10:45 | 2026-10-16 16:33:24 | attacker malicious-activity reconnaissance | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-09-29 10:14:55 | 2026-10-08 11:14:59 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-09-29 10:14:53 | 2026-10-08 11:14:57 | malicious-activity | |
| Proxy | IPWhois.io | 2026-09-28 19:41:51 | 2026-09-28 19:41:51 | anonymization proxy | |
| Port Scanner | AbuseIPDB | 2026-08-20 10:30:07 | 2026-09-28 18:38:38 | attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-09-27 07:09:11 | 2026-09-28 16:06:41 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-09-27 10:03:13 | 2026-09-28 12:30:16 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-09-27 10:27:45 | 2026-09-28 03:42:31 | attacker compromised malicious-activity | |
| Malicious Host | CIArmy | 2026-09-27 20:02:19 | 2026-09-27 20:02:19 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-09-27 13:06:29 | 2026-09-27 13:06:29 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-27 07:09:33 | 2026-09-27 07:09:33 | attacker malicious-activity | |
| Proxy | FireHOL | 2023-01-04 08:47:11 | 2025-10-06 18:30:21 | anonymization | |
| Malware Download | Abuse.ch | 2020-03-27 00:01:36 | 2020-03-27 00:01:36 | ||
| Mail Spammer | Abuseat.org | 2020-03-26 08:34:35 | 2020-03-26 08:34:35 | ||
| Malicious Host | HoneyDB | 2020-03-26 00:00:00 | 2020-03-26 00:00:00 |
Tags
anonymization none abuseWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- ripencc
- AS date
- 1993-08-30 00:00:00
- AS CIDR
- 167.172.144.0/20
- CIDR
- 167.172.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Avenue of the Americas, 10th Floor New York 10013 UNITED STATES
- City
- North Bergen
- State
- NJ
- Postal code
- 07047
- Country
- US — United States 🇺🇸
- First indexed
- 2020-03-26 08:34:32
- Last updated
- 2026-10-16 16:33:24
Malicious IPs in the same CIDR
167.172.157.153 167.172.157.30 167.172.148.89 167.172.150.173 167.172.156.208 167.172.150.24 167.172.148.206 167.172.153.212 167.172.157.17 167.172.158.128 167.172.145.231 167.172.157.217 167.172.148.222 167.172.155.27 167.172.153.2 167.172.158.160 167.172.158.20 167.172.144.9 167.172.146.21 167.172.158.84 167.172.149.163