172.217.22.132

Classification: Whitelisted

172.217.22.132 is a whitelisted (trusted) IP address. Reported by 5 threat sources, last seen 2026-07-24. Network: AS15169 Google LLC.

Current activity

  • Open proxy — Provides anonymization that can hide an attacker.
  • Hosting provider — Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2025-11-09 23:26:18 2026-07-24 09:15:41 anonymization proxy
Hosting Provider Maltiverse 2026-07-24 09:15:41 2026-07-24 09:15:41 benign hosting
Proxy FireHOL 2023-01-02 07:45:36 2025-10-06 20:00:24 anonymization
Anonymizer Maltiverse Research Team 2020-11-22 01:54:16 2021-05-19 12:23:03 anonymizer
Anonymizer Maltiverse 2020-11-02 07:29:45 2021-03-06 17:47:10
Generic.Malware Hybrid-Analysis 2018-04-16 13:00:33 2019-02-21 18:00:12
Phishing site Hybrid-Analysis 2018-08-15 15:15:25 2019-02-21 12:45:08
Malware site Hybrid-Analysis 2018-07-11 14:30:34 2019-01-19 21:00:06
FileRepMalware Hybrid-Analysis 2018-12-30 21:15:03 2018-12-30 21:15:03
Malicious site Hybrid-Analysis 2018-07-10 01:17:24 2018-10-29 20:45:13
Agent Hybrid-Analysis 2018-09-03 17:45:07 2018-09-03 17:45:07
Suspected of Trojan.Downloader.gen Hybrid-Analysis 2018-08-12 10:30:21 2018-08-12 10:30:21
Inject.C Hybrid-Analysis 2018-07-12 08:17:08 2018-07-12 08:17:08
HTML:RedirBA Hybrid-Analysis 2018-07-10 02:00:25 2018-07-10 02:00:25
Trojan.LNK.Agent Hybrid-Analysis 2018-06-26 16:01:42 2018-06-26 16:01:42
Trojan.Generic Hybrid-Analysis 2018-04-16 11:00:49 2018-05-15 12:15:43
Suspicious_GEN.F47V0101 Hybrid-Analysis 2018-05-09 13:45:48 2018-05-09 13:45:48
Program.Unwanted Hybrid-Analysis 2018-04-17 19:15:32 2018-04-17 19:15:32
QVM20.1.9065.Malware Hybrid-Analysis 2018-04-17 12:45:23 2018-04-17 12:45:23
Menti.gmow Hybrid-Analysis 2018-04-17 12:15:20 2018-04-17 12:15:20
Trickbot.M.gen Hybrid-Analysis 2018-04-17 00:15:08 2018-04-17 00:15:08
Gen:Variant.Trojan.VBKrypt Hybrid-Analysis 2018-04-17 00:00:24 2018-04-17 00:00:24
Probably W97Shell Hybrid-Analysis 2018-04-16 15:45:26 2018-04-16 15:45:26
InstallCore Hybrid-Analysis 2018-04-16 13:17:15 2018-04-16 13:17:15
Gen:Variant.Graftor Hybrid-Analysis 2018-04-15 12:00:16 2018-04-16 13:15:23
Trojan.PDF.Phish Hybrid-Analysis 2018-04-16 13:15:09 2018-04-16 13:15:09
HEUR:Trojan.Java.Agent Hybrid-Analysis 2018-04-16 09:45:38 2018-04-16 09:45:38
banker,ramnit Maltiverse 2017-12-15 06:46:10 2017-12-15 06:46:10
maldoc,nanocore,rat Maltiverse 2017-12-12 05:01:47 2017-12-12 05:01:47
nanocore,netwire,rat Maltiverse 2017-12-12 02:56:47 2017-12-12 02:56:47
adwind,evasive,rat Maltiverse 2017-12-04 12:46:14 2017-12-04 12:46:14
apt Maltiverse 2017-12-04 09:45:29 2017-12-04 09:45:29
coinminer,miner Maltiverse 2017-12-04 07:15:38 2017-12-04 07:15:38
autoit,banker,ramnit Maltiverse 2017-11-17 01:30:13 2017-11-17 01:30:13
dofoil,sharik,smokeloader Maltiverse 2017-11-16 15:30:16 2017-11-16 15:30:16
exploit Maltiverse 2017-11-16 05:49:38 2017-11-16 05:49:38
phishing Maltiverse 2017-11-02 12:31:07 2017-11-02 12:31:07
evasive Maltiverse 2017-11-02 02:31:22 2017-11-02 02:31:22
ransomware,shade,troldesh,tvrat Maltiverse 2017-11-01 16:45:55 2017-11-01 16:45:55
dde,exploit,ransomware Maltiverse 2017-10-19 15:14:28 2017-10-19 15:14:28
financial,retefe,trojan Maltiverse 2017-10-19 11:31:39 2017-10-19 11:31:39
locky,nemucod,ransomware Maltiverse 2017-10-17 05:47:24 2017-10-17 05:47:24
cerber,ransomware Maltiverse 2017-10-17 05:03:18 2017-10-17 05:03:18

Tags

anonymization cerber ransomware anonymizer

Whois information

AS name
AS15169 Google LLC
AS registry
arin
AS date
2012-04-16 00:00:00
AS CIDR
172.217.22.0/24
CIDR
172.217.0.0/16
Registrant
Google LLC
Address
1600 Amphitheatre Parkway
City
Paris
State
DC
Postal code
75007
Country
FR — France 🇫🇷
Contact email
[email protected], [email protected]
First indexed
2017-10-17 05:03:18
Last updated
2026-07-24 09:15:41