45.131.194.191
Classification: Malicious
45.131.194.191 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-01. Network: AS206092 VPN Consumer US.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2023-01-29 21:08:04 | 2026-09-01 07:07:34 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-12-25 17:05:20 | 2026-06-01 00:18:45 | anomalous-activity | |
| VPN | IPWhois.io | 2025-04-10 04:14:50 | 2026-02-11 04:51:28 | anonymization | |
| DDoS Attacker | Blocklist.net.ua | 2025-04-13 16:42:30 | 2025-12-11 13:29:24 | malicious-activity | |
| HTTP bot | Blocklist.de | 2025-10-09 02:31:58 | 2025-10-09 02:31:58 | malicious-activity | |
| HTTP bot | Blocklist.de Bots | 2025-10-08 02:41:39 | 2025-10-08 02:41:39 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2025-06-24 06:46:13 | 2025-06-25 06:34:28 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-01-27 04:24:10 | 2025-04-09 21:47:57 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-02-02 22:51:12 | 2025-04-09 12:48:37 | anomalous-activity | |
| Bruteforce | AbuseIPDB | 2025-01-16 21:27:46 | 2025-04-09 12:48:37 | malicious-activity | |
| Proxy | IPWhois.io | 2025-03-30 07:37:30 | 2025-04-05 11:18:41 | anonymization | |
| Hacking | AbuseIPDB | 2025-01-16 21:27:46 | 2025-04-05 02:12:33 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-04-04 04:19:50 | 2025-04-04 04:19:50 | anomalous-activity | |
| SQL Injection | AbuseIPDB | 2025-04-03 07:08:20 | 2025-04-03 07:08:20 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2025-02-28 20:48:55 | 2025-02-28 20:48:55 | malicious-activity | |
| HTTP Spammer | Sblam | 2023-02-07 06:20:25 | 2023-02-18 06:45:47 | malicious-activity |
Tags
bot abuse apache ddos rfi attacker spam bruteforceWhois information
- AS name
- AS206092 VPN Consumer US
- AS registry
- ripencc
- AS date
- 2019-07-22 00:00:00
- AS CIDR
- 45.131.194.0/24
- CIDR
- 45.131.194.0/24
- Registrant
- VPN Consumer US
- Address
- 2355 Market St San Francisco, CA 94114 United States
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- First indexed
- 2023-01-29 21:08:04
- Last updated
- 2026-09-01 07:09:23
Malicious IPs in the same CIDR
45.131.194.78 45.131.194.94 45.131.194.242 45.131.194.114 45.131.194.122 45.131.194.81 45.131.194.33 45.131.194.68 45.131.194.35 45.131.194.117 45.131.194.175 45.131.194.191 45.131.194.220 45.131.194.231 45.131.194.234 45.131.194.237 45.131.194.250 45.131.194.79 45.131.194.145 45.131.194.198 45.131.194.203 45.131.194.205 45.131.194.228 45.131.194.240 45.131.194.247