85.17.31.122

Classification: Whitelisted

85.17.31.122 is a whitelisted (trusted) IP address. Reported by 6 threat sources, last seen 2026-07-19. Network: AS60781 LeaseWeb Netherlands B.V..

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: FLUBOT (S1067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-19 17:17:32 2026-07-19 17:17:32 benign hosting
Malicious Host ThreatCrowd 2020-04-21 22:53:38 2022-09-14 03:17:07 malicious-activity
flubot Maltiverse Research Team 2022-03-07 02:25:52 2022-03-07 02:25:52 malicious-activity S1067 FluBot
Gen:Trojan.Heur.VP2 Hybrid-Analysis 2021-11-26 08:00:58 2021-11-26 08:00:59
Virus.Sality Hybrid-Analysis 2020-01-17 14:45:37 2021-10-10 09:15:30
Malware site Hybrid-Analysis 2018-10-29 02:00:23 2021-06-27 21:30:41
Gen:Variant.Razy Hybrid-Analysis 2020-12-06 06:17:07 2020-12-06 06:17:07
Malicious site Hybrid-Analysis 2018-11-27 04:15:05 2020-01-16 08:47:12
Phishing Phishtank 2019-05-12 08:40:25 2019-05-27 12:14:29
Gen:Variant.Symmi Hybrid-Analysis 2018-11-20 10:00:15 2018-11-20 10:00:16
Generic.Malware Hybrid-Analysis 2018-05-02 14:30:29 2018-11-04 18:15:05
tinba Maltiverse 2018-10-06 17:45:47 2018-10-06 23:48:11
Gen:Variant.Mikey Hybrid-Analysis 2018-07-25 09:01:34 2018-07-25 09:01:34
sality Maltiverse 2017-12-29 03:20:37 2017-12-29 03:20:37
Inmortal malware domain Malware Domains 2017-10-15 14:52:08 2017-10-15 14:52:08

Tags

c&c c2 dga phishing

Whois information

AS name
AS60781 LeaseWeb Netherlands B.V.
AS registry
ripencc
AS date
2005-03-11 00:00:00
AS CIDR
85.17.0.0/16
Registrant
LeaseWeb Netherlands B.V.
City
Amsterdam
Postal code
1012 AB
Country
NL — Netherlands 🇳🇱
First indexed
2017-10-15 14:52:08
Last updated
2026-09-03 01:19:38