Name: Threat Intelligence: 167.172.152.196
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelMEDIUM47/1001 rule type

2 incidents on record · active attack detected · last seen 8d ago

PTR	N/A
Org / ASN	DigitalOcean, LLC
Country	🇺🇸 United States
City	North Bergen, New Jersey
Timezone	America/New_York

Attack Analysis

🇺🇸 United States · North Bergen · 14061 · Digitalocean, LLC

SSH: Login Attempt — Non-Existent User

This IP attempted to authenticate via SSH using a username that does not exist on the system. This is characteristic of automated credential-stuffing attacks cycling through common username wordlists (admin, root, ubuntu, pi, etc.).

Reports (2)

Date	Severity	Description
5 Jun 2026 - 22:58	medium	SSH: Login attempt using non-existent user
5 Jun 2026 - 22:57	high	SSH: Login attempt using non-existent user

Report for IP: 167.172.152.196

Attack Analysis

Reports (2)

Related IPs — Same /24 Block (167.172.152.0/24)