45.131.194.242
Classification: Malicious
45.131.194.242 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-02. Network: AS206092 VPN-Consumer-US.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-04-06 04:40:16 | 2026-09-02 22:45:03 | anonymization vpn | |
| HTTP Spammer | StopForumSpam.com | 2023-10-02 04:01:35 | 2026-08-29 07:04:28 | attacker malicious-activity | |
| HTTP bot | Blocklist.de | 2025-07-27 06:43:36 | 2026-07-06 08:01:38 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-09-28 09:41:27 | 2026-05-21 02:28:27 | anomalous-activity | |
| HTTP Attacker | Blocklist.de | 2026-01-21 02:35:18 | 2026-01-23 03:22:21 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-01-21 08:19:52 | 2026-01-22 09:11:39 | malicious-activity | |
| DDoS Attacker | Blocklist.net.ua | 2025-04-05 16:23:55 | 2025-10-02 09:47:15 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-04-07 08:39:33 | 2025-04-07 08:39:33 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-01-08 15:42:21 | 2025-04-06 04:12:14 | malicious-activity | |
| Hacking | AbuseIPDB | 2025-01-26 21:49:15 | 2025-04-06 01:41:28 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-01-15 01:06:15 | 2025-04-06 01:41:28 | malicious-activity | |
| Proxy | IPWhois.io | 2025-03-19 15:39:58 | 2025-04-05 18:08:04 | anonymization | |
| HTTP Scrapper | AbuseIPDB | 2025-01-25 16:55:05 | 2025-04-04 23:06:11 | anomalous-activity | |
| DDoS attack | AbuseIPDB | 2025-02-14 04:01:06 | 2025-02-14 04:01:06 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-01-16 10:04:51 | 2025-01-17 02:28:51 | malicious-activity | |
| HTTP Spammer | Cleantalk.org | 2023-04-01 09:32:18 | 2023-04-01 09:32:18 | malicious-activity |
Tags
bot abuse attacker spam bruteforce apache ddos rfi login joomla wordpressWhois information
- AS name
- AS206092 VPN-Consumer-US
- AS registry
- ripencc
- AS date
- 2019-07-22 00:00:00
- AS CIDR
- 45.131.194.0/24
- CIDR
- 45.131.194.0/24
- Registrant
- VPN-Consumer-US
- Address
- 2355 Market St San Francisco, CA 94114 United States
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- First indexed
- 2023-04-01 09:32:18
- Last updated
- 2026-09-02 22:45:04
Malicious IPs in the same CIDR
45.131.194.94 45.131.194.242 45.131.194.114 45.131.194.122 45.131.194.81 45.131.194.33 45.131.194.68 45.131.194.35 45.131.194.117 45.131.194.175 45.131.194.191 45.131.194.220 45.131.194.231 45.131.194.234 45.131.194.237 45.131.194.250 45.131.194.79 45.131.194.145 45.131.194.198 45.131.194.203 45.131.194.205 45.131.194.228 45.131.194.240 45.131.194.247 45.131.194.111