45.138.16.110

Classification: Malicious

45.138.16.110 is a malicious IP address in Warsaw, PL. 1,217 sightings from 4 threat sources (HTTP Attacker, Bruteforce), last seen 2026-10-12.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-08-18 16:02:04 2026-10-12 16:16:36 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-08-15 03:00:47 2026-09-13 03:15:20 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:18:54 2026-09-11 16:16:54 attacker malicious-activity
Bruteforce AbuseIPDB 2026-08-15 02:39:27 2026-09-06 19:48:43 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-08-15 09:01:29 2026-09-04 09:00:44 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-15 07:01:39 2026-09-04 07:01:07 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-08-15 02:34:42 2026-09-02 22:25:14 attacker malicious-activity
Port Scanner AbuseIPDB 2026-08-15 04:54:36 2026-09-02 12:40:42 attacker malicious-activity reconnaissance
Hacking AbuseIPDB 2026-08-15 03:31:41 2026-09-02 09:20:16 attacker malicious-activity
Malicious Host AbuseIPDB 2026-08-16 11:16:31 2026-08-31 17:14:06 attacker compromised malicious-activity
SQL Injection AbuseIPDB 2026-08-15 07:16:34 2026-08-30 04:07:01 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-08-15 05:23:32 2026-08-29 20:33:13 attacker malicious-activity
Proxy AbuseIPDB 2026-08-17 22:35:33 2026-08-29 16:42:17 anonymization proxy
Known Attacker AbuseIPDB 2026-08-18 13:02:29 2026-08-27 01:30:30 attacker malicious-activity
Phishing AbuseIPDB 2026-08-18 13:02:29 2026-08-27 01:30:30 malicious-activity phishing
Mail Spammer AbuseIPDB 2026-08-18 13:02:29 2026-08-27 01:30:30 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-08-15 03:55:18 2026-08-27 01:30:30 attacker malicious-activity
DNS Compromise AbuseIPDB 2026-08-27 01:30:30 2026-08-27 01:30:30 compromised malicious-activity
DNS Poisoning AbuseIPDB 2026-08-27 01:30:30 2026-08-27 01:30:30 compromised malicious-activity
SIP Attacker AbuseIPDB 2026-08-27 01:30:30 2026-08-27 01:30:30 attacker malicious-activity
IoT Attacker AbuseIPDB 2026-08-27 01:30:30 2026-08-27 01:30:30 malicious-activity
FTP Attacker AbuseIPDB 2026-08-18 13:02:29 2026-08-18 13:02:29 attacker malicious-activity
Malicious Host HoneyDB 2023-05-01 00:00:00 2023-05-01 00:00:00 malicious-activity

Tags

apache ddos rfi attacker login bruteforce bot joomla wordpress abuse

Whois information

AS name
AS210558 1337 Services GmbH
AS registry
ripencc
AS date
2019-08-07 00:00:00
AS CIDR
45.138.16.0/24
CIDR
45.138.16.0/24
Registrant
1337 Services GmbH
Address
Ludwig-Erhard-Str. 18 DE-20459 Hamburg Germany
City
Warsaw
Postal code
00-510
Country
PL — Poland 🇵🇱
Contact email
[email protected]
First indexed
2023-05-01 19:09:00
Last updated
2026-10-12 16:16:36

Malicious IPs in the same CIDR

45.138.16.214 45.138.16.184 45.138.16.62 45.138.16.95 45.138.16.70 45.138.16.237 45.138.16.189 45.138.16.240 45.138.16.156 45.138.16.159 45.138.16.222 45.138.16.110 45.138.16.69 45.138.16.231 45.138.16.127 45.138.16.44 45.138.16.42 45.138.16.99 45.138.16.121 45.138.16.76 45.138.16.125 45.138.16.164 45.138.16.239