45.61.162.107
Classification: Malicious
45.61.162.107 is a malicious IP address. Linked to Cobalt Strike malware. Reported by 4 threat sources, last seen 2026-09-09.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2018-08-18 09:06:41 | 2026-09-09 07:09:50 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-09-04 16:29:49 | 2026-09-04 16:29:49 | anonymization vpn | |
| Cobalt Strike | ThreatFox Abuse.ch | 2024-01-03 15:17:26 | 2024-01-05 14:18:56 | malicious-activity | S0154 Cobalt Strike |
| HTTP Spammer | Cleantalk.org | 2018-08-08 06:49:53 | 2018-08-08 06:49:53 |
Tags
abuse bot advin-as c2 censys port:9999 agentemis beacon cobaltstrike cobeaconWhois information
- AS name
- AS14956 RouterHosting LLC
- AS registry
- arin
- AS date
- 2015-01-02 00:00:00
- AS CIDR
- 45.61.160.0/20
- CIDR
- 45.61.128.0/18
- Registrant
- RouterHosting LLC
- Address
- 1621 Central Ave
- City
- Ogden
- State
- UT
- Postal code
- 84401
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2018-08-08 06:49:53
- Last updated
- 2026-09-09 07:09:50
Malicious IPs in the same CIDR
45.61.170.68 45.61.175.112 45.61.169.175 45.61.170.197 45.61.175.107 45.61.169.94 45.61.170.217 45.61.171.153 45.61.171.213 45.61.171.150 45.61.175.102 45.61.162.107 45.61.163.61 45.61.166.195 45.61.169.86 45.61.161.56 45.61.162.121 45.61.163.56 45.61.163.159 45.61.164.82 45.61.164.243 45.61.167.22 45.61.162.202 45.61.163.57 45.61.163.58