Is 185.213.154.1 a VPN? No — 31173 Services AB.
185.213.154.1No VPN/proxy indicators — 2 signals matched across 2 intelligence sources. Overall risk: very low.
IP intelligence
Matches against the Tor exit list, public proxy feeds, curated VPN-provider ranges, and datacenter ASN registries.
Datacenter / hosting ASN AS39351 (31173 Services AB)
ASN classification
Team Cymru allocation data + PeeringDB self-declared network type.
PeeringDB classifies ASN AS39351 as "NSP" — backbone / transit carrier
Should I block this IP?
Practical guidance by use case — fraud, ad-ops, streaming, and general websites.
No VPN, proxy, datacenter, or Tor signals matched. The IP looks like a real consumer or business broadband line. Treat as a normal user.
- Fraud / risk teams
- Apply your standard risk model. No IP-based step-up needed.
- Ad ops / programmatic
- Bid normally. This IP is in your billable, real-human pool.
- Streaming / geo-licensing
- Allow. Geo-licensing rules still apply, but VPN evasion is not a concern here.
- General sites & forums
- Standard access. Use other signals (device fingerprint, behavior, account age) for risk scoring.
About IP address 185.213.154.1
185.213.154.1 is an IPv4 address routed via AS39351 (31173 Services AB) and geo-located to Sweden. The verdict above combines six free, no-auth intelligence sources: local db-ip ASN data, the Tor Project exit list, public proxy feeds (TheSpeedX / Proxifly / FireHOL), Team Cymru + PeeringDB for ASN classification, RIPE NCC for BGP topology and abuse contacts, and Shodan InternetDB for ~30-day port observation.
Verdicts are recomputed on every page load and cached for up to one hour upstream. No data about your browser or identity is persisted.