81.17.18.50

Classification: Malicious

81.17.18.50 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-31. Network: AS51852 Private Layer INC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • TOR node — Part of the TOR anonymization network.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TOR Node IPWhois.io 2026-08-31 22:13:46 2026-08-31 22:13:46 anomalous-activity anonymization tor
Mail Spammer Barracuda 2021-03-02 16:30:04 2026-08-31 22:13:46 attacker malicious-activity
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2021-03-04 14:41:46 2026-08-30 11:04:56 anomalous-activity anonymization tor
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2021-03-04 14:39:09 2026-08-10 11:01:46 anomalous-activity anonymization tor
TOR Exit Node TorProject.org 2021-03-02 16:30:03 2026-08-08 10:03:04 anomalous-activity anonymization anonymizer tor

Tags

tor anonymizer anonymization

Whois information

AS name
AS51852 Private Layer INC
AS registry
ripencc
AS date
2011-08-29 00:00:00
AS CIDR
81.17.16.0/20
Registrant
Private Layer INC
City
Zurich
Postal code
8032
Country
CH — Switzerland 🇨🇭
First indexed
2021-03-02 16:30:03
Last updated
2026-08-31 22:13:47

Malicious IPs in the same CIDR

81.17.28.117 81.17.16.235 81.17.28.95 81.17.18.50