81.17.16.178 has a high threat confidence level of 72%, originating from Zurich, Switzerland, on the Private Layer INC network (51852). It has been observed across 624 sessions targeting MSSQL, MYSQL, POSTGRES, First observed on January 25, 2026, most recently active February 19, 2026.