JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.252.6

167.172.252.6 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.252.6

Whois 167.172.252.6

IP Abuse Reports for 167.172.252.6:

This IP address has been reported a total of 17 times from 17 distinct sources. 167.172.252.6 was first reported on February 24th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-12 20:12:01 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 4ensic	2026-03-11 10:23:43 (2 months ago)	2026-03-11T05:18:26.361310-05:00 drpxkvfh.colocrossing.cloud sshd[140709]: pam_unix(sshd:auth): auth ... show more 2026-03-11T05:18:26.361310-05:00 drpxkvfh.colocrossing.cloud sshd[140709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T05:19:37.004714-05:00 drpxkvfh.colocrossing.cloud sshd[140715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T05:20:45.157567-05:00 drpxkvfh.colocrossing.cloud sshd[140726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T05:21:44.721212-05:00 drpxkvfh.colocrossing.cloud sshd[140738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T05:22:44.600640-05:00 drpxkvfh.colocrossing.cloud sshd[140752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T05:23:42.356931-05:00 drpxkvfh.colocrossing.cloud ... show less	Brute-Force SSH
🇺🇸 mentality	2026-03-11 10:22:40 (2 months ago)	Banned due to repeated failed login attempts	Brute-Force SSH
🇺🇸 Dominik Wozniak	2026-03-11 10:21:39 (2 months ago)	2026-03-11T10:20:37.772087+00:00 ssh sshd[2721054]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-03-11T10:20:37.772087+00:00 ssh sshd[2721054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T10:20:39.971266+00:00 ssh sshd[2721054]: Failed password for root from 167.172.252.6 port 51360 ssh2 2026-03-11T10:21:37.534411+00:00 ssh sshd[2721417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root 2026-03-11T10:21:39.303416+00:00 ssh sshd[2721417]: Failed password for root from 167.172.252.6 port 37334 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-11 10:21:17 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇵🇹 WebTejo	2026-03-11 10:20:53 (2 months ago)	Detected multiple authentication failures and invalid user attempts from IP address 167.172.252.6 on ... show more Detected multiple authentication failures and invalid user attempts from IP address 167.172.252.6 on [PT] SP01 Node show less	Brute-Force SSH
🇳🇱 lns.bz	2026-03-11 10:20:42 (2 months ago)	SSH bruteforce [DOPP]	SSH
🇬🇧 Silly Development	2026-03-11 10:20:02 (2 months ago)	Mar 11 10:18:55 vps sshd[1126093]: Failed password for root from 167.172.252.6 port 55618 ssh2 Mar 1 ... show more Mar 11 10:18:55 vps sshd[1126093]: Failed password for root from 167.172.252.6 port 55618 ssh2 Mar 11 10:19:58 vps sshd[1126111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.252.6 user=root Mar 11 10:20:00 vps sshd[1126111]: Failed password for root from 167.172.252.6 port 56358 ssh2 ... show less	Brute-Force SSH
🇪🇸 tutaim.com	2026-03-11 10:19:08 (2 months ago)	👿 167.172.252.6 has been involved in malicious and brute-force activity. Reported by umarmohammad.xy ... show more 👿 167.172.252.6 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz show less	Brute-Force SSH
🇺🇸 p0tatosmash3r	2026-03-11 10:18:59 (2 months ago)	Port Scan from 167.172.252.6	Port Scan SSH
🇨🇦 Largnet SOC	2026-03-11 10:16:33 (2 months ago)	167.172.252.6 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
🇳🇱 mha.fi	2026-03-11 10:16:28 (2 months ago)	Unauthorized connection attempt detected from IP address 167.172.252.6 to port 22 (DNS-NL) [I]	Brute-Force Exploited Host
🇨🇦 polycoda	2026-03-11 10:16:15 (2 months ago)	AutoBlock: 📡 Port 22 Scan (Non Decay-Based) - 📡 Port Scan (Non Decay-Based)	Port Scan SSH
🇺🇸 technojoe99	2026-03-11 10:15:40 (2 months ago)	Attempted SSH connection from 167.172.252.6 port 44119 asn digitalocean; no valid users in that asn	Port Scan SSH
🇺🇸 xmission.com	2026-03-11 10:15:19 (2 months ago)	Blocked by UFW (TCP on 22) Source port: 44119 TTL: 241 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 44119 TTL: 241 Packet length: 40 TOS: 0x08 This report (for 167.172.252.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.242.177.178

🇺🇸 162.217.166.39

🇯🇵 153.199.82.232

🇳🇱 45.148.10.157

🇺🇸 34.186.234.214

🇦🇷 181.116.220.140

🇻🇳 103.179.172.233

🇺🇸 66.132.224.29

🇺🇸 48.211.213.37

🇯🇵 47.79.151.239

🇱🇹 45.227.254.170

🇮🇩 180.248.241.177

🇦🇲 176.32.193.16

🇺🇸 162.216.150.141

🇨🇭 104.244.74.201

🇫🇷 91.196.152.116

🇫🇷 91.196.152.24

🇸🇪 90.227.134.176

🇬🇧 81.19.219.252

🇳🇱 81.19.216.97