IOC Radar
IPMediumSignal 64/100

167.172.103.15

Location
GermanyGermany
Frankfurt am Main, Hessen
ASN
AS14061
DigitalOcean, LLC
First Seen
Apr 1, 2025
Last Seen
Jan 15, 2026
Apr 1
First Seen
439d ago
Jan 15
Last Seen
150d ago
8
Reports
source reports
64%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
64%
Signal Score
64 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

22 techniques

Network Information

CountryDEGermany
RegionFrankfurt am Main, Hessen
ASNAS14061
OrganizationDigitalOcean, LLC

Feed Intelligence Summary

8 reports64% confidence
8
Source reports
64%
Confidence score
Category tags
abuseactive scanningbotnetbrute forcecommand and controlcredential accesscredential stuffingdata exfiltrationdistributed attackseuropegermanyindicatorlogin brute forcemalicious softwaremalwarenetworknetwork enumerationnetwork reconnaissancenetwork scanningprocess injectionreconnaissanceresearchedscannerself-signedssh attackt1016t1018t1021t1021.004t1046t1055t1059t1071.001t1110t1110.001t1110.002t1190t1486t1496t1499.002t1499.003t1565t1583t1595t1595.001t1595.002t1595.003

Activity Timeline

1 total obs
Jan 15Jan 15

Threat Activity Heatmap

· Peak: 2026-01-15
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The Internet Protocol address 167.172.103.15, with a threat score of 63.54 and not identified as benign, represents a significant and potentially severe threat to organizational security. This IPv4 address has been flagged across multiple reputable threat intelligence feeds, indicating its involvement in activities consistent with malicious intent. Observations suggest that this address is actively engaged in reconnaissance and potential initial access attempts, including brute-force attacks aga…

Threat ScoreMedium Risk
64
SIGNAL
Signal Score
64%
Confidence
8
Reports
First seenApr 1, 2025
Last seenJan 15, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, Hessen
ASNAS14061
OrgDigitalOcean, LLC
Coords50.1188, 8.6843

VirusTotal

Not checked

WHOIS

description
Bruteforce, scanning, details in pulse
raw
inetnum: 167.172.0.0 - 167.172.255.255 netname: DigitalOcean descr: DigitalOcean, LLC country: US org: ORG-DOI2-RIPE admin-c: PT7353-RIPE tech-c: PT7353-RIPE status: LEGACY mnt-by: RIPE-NCC-LEGACY-MNT mnt-by: digitalocean created: 2003-06-26T15:46:32Z last-modified: 2019-05-01T16:19:07Z source: RIPE organisation: ORG-DOI2-RIPE org-name: DigitalOcean, LLC country: US org-type: LIR address: 101 Avenue of the Americas, 10th Floor address: New York address: 10013 address: UNITED STATES phone: +1 888 890 6714 mnt-ref: digitalocean mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: digitalocean abuse-c: AD10778-RIPE language: EN created: 2012-11-29T14:59:01Z last-modified: 2020-12-16T13:24:44Z source: RIPE # Filtered person: DigitalOcean Network Operations address: 101 Ave of the Americas, FL2 address: New York, NY, 10013 address: United States of America phone: +13478756044 nic-hdl: PT7353-RIPE mnt-by: digitalocean created: 2015-03-11T16:37:07Z last-modified: 2022-08-23T13:31:16Z source: RIPE # Filtered org: ORG-DOI2-RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 5 months ago
Appeared in 8 threat reports