← Back to Dashboard

12.156.67.18 Threat Intelligence Report

Risk Level: CRITICAL — 769 abuse reports from 25 sources

Threat Intelligence Summary

IP address 12.156.67.18 has been flagged in 769 abuse reports across 25 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with attacks, brute force, bruteforce, malware c2, persistent attacker, scanning, severe abuse, ssh-bruteforce, ssh brute force, ssh bruteforce, voip attack, web attack, web brute force.

This IP is geolocated in United States (Oakland) and belongs to the network AT&T Enterprises, LLC (AS7018). Reports span from 2023-08-18 to 2026-03-29.

Assessment: With 769 abuse reports, 12.156.67.18 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. The IP has been observed conducting automated SSH login attempts against internet-facing servers, a technique commonly used to gain unauthorized access to systems.

Data aggregated from 25 independent threat intelligence sources.

Geolocation

Country United States
City Oakland
Region California
Timezone America/Los_Angeles

Threat Status

Overall Status Critical
Threat Score 100.0%
Report Count 769
Sources 25
First Seen 2023-08-18
Last Seen 2026-03-29

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

United States Threat Intelligence → AS7018 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: