IP address


.00081.17.28.131hostedby.privatelayer.com
Shodan(more info)
Passive DNS
Tags:
IP blacklists
CI Army
81.17.28.131 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-29 02:50:00.825000
Was present on blacklist at: 2026-08-01 02:50, 2026-08-02 02:50, 2026-08-03 02:50, 2026-08-04 02:50, 2026-08-05 02:50, 2026-08-06 02:50, 2026-08-07 02:50, 2026-08-08 02:50, 2026-08-09 02:50, 2026-08-10 02:50, 2026-08-11 02:50, 2026-08-12 02:50, 2026-08-13 02:50, 2026-08-14 02:50, 2026-08-15 02:50, 2026-08-16 02:50, 2026-08-17 02:50, 2026-08-18 02:50, 2026-08-19 02:50, 2026-08-20 02:50, 2026-08-21 02:50, 2026-08-22 02:50, 2026-08-23 02:50, 2026-08-24 02:50, 2026-08-25 02:50, 2026-08-26 02:50, 2026-08-27 02:50, 2026-08-28 02:50, 2026-08-29 02:50
AbuseIPDB
81.17.28.131 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-28 04:00:00.597000
Was present on blacklist at: 2026-08-01 04:00, 2026-08-02 04:00, 2026-08-07 04:00, 2026-08-08 04:00, 2026-08-09 04:00, 2026-08-10 04:00, 2026-08-11 04:00, 2026-08-12 04:00, 2026-08-13 04:00, 2026-08-14 04:00, 2026-08-15 04:00, 2026-08-17 04:00, 2026-08-18 04:00, 2026-08-19 04:00, 2026-08-22 04:00, 2026-08-24 04:00, 2026-08-26 04:00, 2026-08-27 04:00, 2026-08-28 04:00

Threat categories

TLRoleCategoryDetails
No threat category tags assigned

Warden events (7093)
2026-09-05
ReconScanning (node.ce2b59): 13
ReconScanning (node.368407): 6
ReconScanning (node.4dc198): 10
ReconScanning (node.9c1411): 10
2026-09-01
ReconScanning (node.9c1411): 46
2026-08-31
ReconScanning (node.9c1411): 80
2026-08-30
ReconScanning (node.9c1411): 86
2026-08-29
ReconScanning (node.9c1411): 88
2026-08-28
ReconScanning (node.4dc198): 159
ReconScanning (node.9c1411): 87
ReconScanning (node.368407): 14
ReconScanning (node.ce2b59): 26
2026-08-27
ReconScanning (node.9c1411): 87
ReconScanning (node.ce2b59): 31
ReconScanning (node.368407): 21
ReconScanning (node.4dc198): 147
2026-08-26
ReconScanning (node.4dc198): 264
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 87
ReconScanning (node.368407): 20
2026-08-25
ReconScanning (node.4dc198): 256
ReconScanning (node.9c1411): 86
ReconScanning (node.ce2b59): 29
ReconScanning (node.368407): 20
2026-08-24
ReconScanning (node.4dc198): 225
ReconScanning (node.9c1411): 84
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 14
2026-08-23
ReconScanning (node.4dc198): 182
ReconScanning (node.9c1411): 86
ReconScanning (node.ce2b59): 31
ReconScanning (node.368407): 21
2026-08-22
ReconScanning (node.4dc198): 191
ReconScanning (node.9c1411): 85
ReconScanning (node.ce2b59): 31
ReconScanning (node.368407): 19
2026-08-21
ReconScanning (node.9c1411): 86
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 20
ReconScanning (node.4dc198): 102
2026-08-20
ReconScanning (node.4dc198): 76
ReconScanning (node.9c1411): 83
ReconScanning (node.ce2b59): 31
ReconScanning (node.368407): 19
2026-08-19
ReconScanning (node.4dc198): 259
ReconScanning (node.9c1411): 84
ReconScanning (node.368407): 22
ReconScanning (node.ce2b59): 29
2026-08-18
ReconScanning (node.4dc198): 225
ReconScanning (node.9c1411): 82
ReconScanning (node.368407): 23
ReconScanning (node.ce2b59): 30
2026-08-17
ReconScanning (node.4dc198): 216
ReconScanning (node.9c1411): 81
ReconScanning (node.368407): 26
ReconScanning (node.ce2b59): 30
2026-08-16
ReconScanning (node.9c1411): 84
ReconScanning (node.4dc198): 188
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 15
2026-08-15
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 128
ReconScanning (node.9c1411): 82
ReconScanning (node.368407): 17
2026-08-14
ReconScanning (node.4dc198): 122
ReconScanning (node.9c1411): 82
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 18
2026-08-13
ReconScanning (node.368407): 14
ReconScanning (node.9c1411): 83
ReconScanning (node.ce2b59): 29
ReconScanning (node.4dc198): 77
2026-08-12
ReconScanning (node.4dc198): 215
ReconScanning (node.9c1411): 84
ReconScanning (node.368407): 21
ReconScanning (node.ce2b59): 30
2026-08-11
ReconScanning (node.4dc198): 257
ReconScanning (node.368407): 11
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 83
2026-08-10
ReconScanning (node.ce2b59): 29
ReconScanning (node.4dc198): 211
ReconScanning (node.368407): 19
ReconScanning (node.9c1411): 47
2026-08-09
ReconScanning (node.368407): 31
ReconScanning (node.4dc198): 132
ReconScanning (node.ce2b59): 30
2026-08-08
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 177
ReconScanning (node.368407): 36
2026-08-07
ReconScanning (node.4dc198): 120
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 31
2026-08-06
ReconScanning (node.ce2b59): 23
ReconScanning (node.368407): 30
ReconScanning (node.4dc198): 101
DShield reports (IP summary, reports)
2026-07-31
Number of reports: 381
Distinct targets: 123
2026-08-01
Number of reports: 381
Distinct targets: 123
2026-08-02
Number of reports: 417
Distinct targets: 127
2026-08-03
Number of reports: 443
Distinct targets: 126
2026-08-04
Number of reports: 349
Distinct targets: 158
2026-08-05
Number of reports: 322
Distinct targets: 90
2026-08-06
Number of reports: 466
Distinct targets: 301
2026-08-07
Number of reports: 466
Distinct targets: 301
2026-08-08
Number of reports: 498
Distinct targets: 258
2026-08-09
Number of reports: 514
Distinct targets: 340
2026-08-10
Number of reports: 514
Distinct targets: 340
2026-08-11
Number of reports: 668
Distinct targets: 406
2026-08-12
Number of reports: 637
Distinct targets: 314
2026-08-13
Number of reports: 365
Distinct targets: 264
2026-08-14
Number of reports: 648
Distinct targets: 351
2026-08-15
Number of reports: 648
Distinct targets: 351
2026-08-16
Number of reports: 644
Distinct targets: 312
2026-08-17
Number of reports: 458
Distinct targets: 339
2026-08-18
Number of reports: 646
Distinct targets: 370
2026-08-19
Number of reports: 646
Distinct targets: 370
2026-08-20
Number of reports: 188
Distinct targets: 140
2026-08-21
Number of reports: 188
Distinct targets: 140
2026-08-22
Number of reports: 451
Distinct targets: 303
2026-08-23
Number of reports: 451
Distinct targets: 303
2026-08-24
Number of reports: 593
Distinct targets: 307
2026-08-25
Number of reports: 593
Distinct targets: 307
2026-08-26
Number of reports: 686
Distinct targets: 349
2026-08-27
Number of reports: 653
Distinct targets: 325
2026-08-28
Number of reports: 540
Distinct targets: 319
2026-09-05
Number of reports: 61
Distinct targets: 45
Origin AS
AS51852 - PLI-AS
BGP Prefix
81.17.16.0/20
geo
Switzerland, Zurich
🕑 Europe/Zurich
hostname
hostedby.privatelayer.com
Address block ('inetnum' or 'NetRange' in whois database)
81.17.16.0 - 81.17.31.255
last_activity
2026-09-05 16:39:22
last_warden_event
2026-09-05 16:39:22
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags: scanner
CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-08-01 02:51:32.801000
ts_last_update
2026-09-24 02:51:40.409000

Warden event timeline

DShield event timeline

Presence on blacklists