IOC Radar
IPMediumSignal 39/100

167.172.91.112

Location
SingaporeSingapore
Singapore, Singapore
ASN
AS14061
DigitalOcean, LLC
First Seen
Jun 30, 2025
Last Seen
Mar 31, 2026
Jun 30
First Seen
349d ago
Mar 31
Last Seen
74d ago
16
Reports
source reports
39%
Confidence
medium
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
39%
Signal Score
39 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

23 techniques

Network Information

CountrySGSingapore
RegionSingapore, Singapore
ASNAS14061
OrganizationDigitalOcean, LLC

Feed Intelligence Summary

16 reports39% confidence
16
Source reports
39%
Confidence score
Category tags
abuseactive scanactive scanningasiaattackauthenticationauthentication attackbad reputationbotnetbotnet activitybrute forcebrute force attackbrute force attemptcommand and controlcommunication protocolcredential accesscredential stuffingdata exfiltrationdata store exposuredistributed attackseuropeexploitation activityfinlandidentity & access exploitationindicatorinjection activitylogin attacklogin brute-forcemalicious activitymalicious softwaremalwarenetworknetwork attacksnetwork intrusionnetwork service scanningpassword attackpassword attacksprocess injectionreconnaissanceremote accessresearchedscannerservice scansingaporessh attackt1021.004t1040t1055t1071.001t1078t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1133t1486t1496t1499.002t1499.003t1565t1588t1588.004t1589t1595.001t1595.002t1595.003tcp protocolthreat actortor node

Activity Timeline

1 total obs
Mar 31Mar 31

Threat Activity Heatmap

· Peak: 2026-03-31
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
39
SIGNAL
Signal Score
39%
Confidence
16
Reports
First seenJun 30, 2025
Last seenMar 31, 2026
GeolocationSG
CountrySingapore
LocationSingapore, Singapore
ASNAS14061
OrgDigitalOcean, LLC
Coords1.3078, 103.6818

VirusTotal

Not checked

WHOIS

description
SSH brute force IOCs collected mainly from hosts located in Finland
raw
inetnum: 167.0.0.0 - 167.255.255.255 netname: ERX-NETBLOCK descr: Early registration addresses remarks: ------------------------------------------------------ remarks: Important: remarks: remarks: Networks in this range were allocated by InterNIC remarks: prior to the formation of Regional Internet remarks: Registries (RIRs): AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC. remarks: remarks: Address ranges from this historical space have now remarks: been transferred to the appropriate RIR database.remarks: remarks: If your search has returned this record, it means the remarks: address range is not administered by APNIC. remarks: remarks: Instead, please search one of the following databases: remarks: remarks: - AfriNIC (Africa) remarks: website: http://www.afrinic.net/ remarks: command line: whois.afrinic.net remarks: remarks: - ARIN (Northern America) remarks: website: http://www.arin.net/ remarks: command line: whois.arin.net remarks: remarks: - LACNIC (Latin America and the Carribean) remarks: website: http://www.lacnic.net/ remarks: command line: whois.lacnic.net remarks: remarks: - RIPE NCC (Europe) remarks: website: http://www.ripe.net/ remarks: command line: whois.ripe.net remarks: remarks: For information on the Early Registration Transfer remarks: (ERX) project, see: remarks: remarks: http://www.apnic.net/db/erx remarks: remarks: ------------------------------------------------------ country: AU admin-c: IANA1-AP tech-c: IANA1-AP mnt-by: APNIC-HM mnt-lower: APNIC-HM status: ALLOCATED PORTABLE last-modified: 2015-08-28T00:31:42Z source: APNIC mnt-irt: IRT-APNIC-AP irt: IRT-APNIC-AP address: Brisbane, Australia e-mail: [email protected] abuse-mailbox: [email protected] admin-c: HM20-AP tech-c: NO4-AP auth: # Filtered remarks: APNIC is a Regional Internet Registry. remarks: We do not operate the referring network and remarks: are unable to investigate complaints of network abuse. remarks: For information about IRT, see www.apnic.net/irt remarks: [email protected] was validated on 2020-02-03 mnt-by: APNIC-HM last-modified: 2023-08-18T00:42:38Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 11 months ago · Last seen 2 months ago
Appeared in 16 threat reports