72.21.81.200
Classification: Whitelisted
72.21.81.200 is a whitelisted (trusted) IP address. Reported by 8 threat sources, last seen 2026-06-18. Network: AS15133 Edgecast Inc..
Current activity
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154) BUNDLORE (S0482)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-06-18 17:10:31 | 2026-06-18 17:10:31 | benign | |
| Cobalt Strike | ThreatFox Abuse.ch | 2021-11-10 00:06:17 | 2022-06-28 09:19:56 | malicious-activity | S0154 Cobalt Strike |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2020-08-02 07:44:23 | 2021-04-27 09:29:01 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-24 00:15:20 | 2021-04-08 16:36:34 | ||
| Trojan.Ole2.Vbs | Hybrid-Analysis | 2018-10-31 11:00:49 | 2021-03-30 16:30:07 | ||
| Malicious site | Hybrid-Analysis | 2018-08-29 23:30:12 | 2021-03-15 10:30:50 | ||
| Heur.BZC.YAX.Pantera.68 | Hybrid-Analysis | 2021-03-04 10:45:09 | 2021-03-04 10:45:09 | ||
| Malicious Host | HoneyDB | 2021-01-15 00:00:00 | 2021-01-15 00:00:00 | malicious-activity | |
| Generic.PwShell.Rozena.1 | Hybrid-Analysis | 2020-11-10 13:45:35 | 2020-11-10 13:45:35 | ||
| Malware site | Hybrid-Analysis | 2018-06-11 17:15:42 | 2020-10-26 07:30:06 | ||
| Phishing Outlook | OpenPhish | 2020-09-16 06:13:14 | 2020-09-16 06:13:14 | ||
| Phishing site | Hybrid-Analysis | 2018-06-11 08:45:39 | 2020-07-22 09:15:12 | ||
| Malware Download | Abuse.ch | 2020-07-03 15:15:06 | 2020-07-03 15:15:06 | malicious-activity | |
| JS:Trojan.Cryxos | Hybrid-Analysis | 2020-05-22 15:00:11 | 2020-05-22 15:00:11 | ||
| Gen:NN.ZexaF.32515 | Hybrid-Analysis | 2019-12-03 10:15:23 | 2019-12-03 10:15:23 | ||
| DFI | Hybrid-Analysis | 2019-03-25 18:30:07 | 2019-03-25 18:30:07 | ||
| Gen:Variant.Fugrafa | Hybrid-Analysis | 2019-03-15 21:00:16 | 2019-03-15 21:00:16 | ||
| Trojan.Patched.SAP | Hybrid-Analysis | 2018-12-16 03:00:04 | 2018-12-16 03:00:04 | ||
| Virus.Neshta | Hybrid-Analysis | 2018-08-26 04:00:38 | 2018-08-26 04:00:38 | ||
| Adware.Linkury | Hybrid-Analysis | 2018-06-18 13:45:29 | 2018-06-18 13:45:29 | ||
| SGeneric | Hybrid-Analysis | 2018-06-18 12:00:51 | 2018-06-18 12:00:51 | ||
| RiskTool.UltraSurf | Hybrid-Analysis | 2018-05-11 07:00:52 | 2018-05-11 07:00:53 | ||
| HTML_PHISH.AUSEJY | Hybrid-Analysis | 2018-04-15 08:15:16 | 2018-04-15 08:15:16 | ||
| hacktool | Maltiverse | 2018-03-19 17:31:30 | 2018-03-19 17:31:30 | ||
| evasive | Maltiverse | 2017-10-19 11:02:49 | 2018-03-06 22:16:33 | ||
| bundlore | Maltiverse | 2018-03-05 13:09:55 | 2018-03-05 13:09:55 | S0482 Bundlore | |
| banbra ,banker ,banload ,keylogger | Maltiverse | 2018-03-03 01:55:42 | 2018-03-03 01:55:42 | ||
| exploit | Maltiverse | 2017-12-27 11:26:40 | 2017-12-27 11:26:40 | ||
| msil,pua,toolbar | Maltiverse | 2017-12-12 19:01:05 | 2017-12-12 19:01:05 | ||
| Malicious host | IBM X-Force Exchange | 2017-12-10 17:49:26 | 2017-12-10 17:49:26 | ||
| evasive,msil,toolbar | Maltiverse | 2017-12-08 12:46:18 | 2017-12-08 12:46:18 | ||
| adware,nsis | Maltiverse | 2017-11-16 04:31:53 | 2017-11-16 04:31:53 | ||
| Malware | Maltiverse | 2015-12-16 11:55:00 | 2016-02-15 10:11:00 | ||
| Spam | Maltiverse | 2015-12-16 11:55:00 | 2015-12-16 11:55:00 |
Tags
cobaltstrike digitalocean llc agentemis beacon digitalocean-asn edgecast port:443 banbra banker banload keylogger bundlore evasive hacktool none abuse phishing sector:email provider outlookWhois information
- AS name
- AS15133 Edgecast Inc.
- AS registry
- arin
- AS date
- 2007-04-23 00:00:00
- AS CIDR
- 72.21.81.0/24
- CIDR
- 72.21.80.0/20
- Registrant
- Edgecast Inc
- Address
- 13031 W Jefferson Blvd. Building 900
- City
- Los Angeles
- State
- CA
- Postal code
- 90014
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2017-10-19 11:02:49
- Last updated
- 2026-07-22 11:55:00