81.17.18.196

Classification: Whitelisted

81.17.18.196 is a whitelisted (trusted) IP address. Reported by 10 threat sources, last seen 2026-07-31. Network: AS51852 CLIENT1060.

Current activity

  • Hosting provider — Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-31 09:18:06 2026-07-31 09:18:06 benign hosting
suppobox Maltiverse Research Team 2022-05-02 00:48:11 2022-05-02 00:48:11 malicious-activity
Malware Hybrid-Analysis 2021-06-14 10:30:43 2021-12-11 14:17:26
Phishing site Hybrid-Analysis 2021-09-17 13:30:35 2021-09-17 13:30:35
Malware site Hybrid-Analysis 2021-02-04 23:00:06 2021-08-04 23:45:08
banjori Maltiverse Research Team 2021-03-20 07:10:24 2021-05-03 06:35:52 malicious-activity
Generic.Malware Hybrid-Analysis 2021-01-08 15:15:11 2021-04-14 14:22:33
AgentTesla.AHE Hybrid-Analysis 2021-04-09 09:45:22 2021-04-09 09:45:22
Tesco Bank phishing Antiphishing.com.ar 2021-03-02 14:25:06 2021-03-02 14:25:06
Malicious url Cyber Threat Coalition 2020-12-23 20:46:37 2021-02-28 08:51:53 malicious-activity
Social Engineering Cyber Threat Coalition 2021-01-23 08:47:40 2021-02-28 08:51:53 malicious-activity
Malicious Hostname Cyber Threat Coalition 2020-12-26 06:13:28 2021-02-24 06:12:35 malicious-activity
Phishing Phishtank 2020-12-13 01:00:34 2020-12-15 02:06:13 compromised malicious-activity
Covid19 scam Cyber Threat Coalition 2020-11-21 00:16:58 2020-12-13 19:45:56 malicious-activity
Malware.Generic Hybrid-Analysis 2020-11-20 15:20:56 2020-11-20 15:20:59
uber phishing Antiphishing.com.ar 2020-08-02 05:05:22 2020-08-06 14:34:19
Covid19 scam DomainTools 2020-04-19 19:19:28 2020-07-26 00:25:28 malicious-activity
linkedin phishing Antiphishing.com.ar 2020-07-12 03:21:06 2020-07-12 03:21:06
Covid19 scam CCN-CERT 2020-04-13 21:51:23 2020-04-13 22:47:51 malicious-activity
Malicious domain Telefonica Peru 2020-04-09 04:59:17 2020-04-10 04:39:01
virut Maltiverse Research Team 2020-04-02 01:43:13 2020-04-02 01:43:13
Vawtrak Bambernek 2019-10-30 07:04:10 2019-10-30 07:04:10
banjori Bambernek 2019-10-08 00:51:24 2019-10-08 00:51:24

Tags

c&c c2 dga malware banjori vawtrak covid19 coronavirus scam phishing

Whois information

AS name
AS51852 CLIENT1060
AS registry
ripencc
AS date
2011-08-29 00:00:00
AS CIDR
81.17.16.0/20
Registrant
CLIENT1060
City
Zurich
Postal code
8032
Country
CH — Switzerland 🇨🇭
First indexed
2019-10-08 00:51:24
Last updated
2026-07-31 09:18:06

Malicious IPs in the same CIDR

81.17.28.95 81.17.28.117 81.17.16.235 81.17.18.50