45.138.16.156

Classification: Malicious

45.138.16.156 is a malicious IP address in Warsaw, PL. 942 sightings from 6 threat sources (HTTP Attacker, Bruteforce), last seen 2026-10-12.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-08-10 16:05:01 2026-10-12 16:16:36 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:18:54 2026-09-11 16:16:54 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2025-02-14 08:39:41 2026-08-30 03:16:34 attacker malicious-activity
Hacking AbuseIPDB 2025-02-14 12:00:11 2026-08-19 12:00:21 attacker malicious-activity
HTTP Attacker AbuseIPDB 2025-02-14 08:39:41 2026-08-19 12:00:21 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-08-06 09:00:40 2026-08-16 09:00:22 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-06 07:00:41 2026-08-16 07:00:28 attacker malicious-activity
Port Scanner AbuseIPDB 2024-11-23 03:25:02 2026-08-15 13:52:33 attacker malicious-activity reconnaissance
Bruteforce AbuseIPDB 2024-11-21 20:51:28 2026-08-15 10:19:08 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-08-07 20:23:31 2026-08-15 00:14:44 attacker malicious-activity
SSH Attacker AbuseIPDB 2024-11-21 20:51:28 2026-08-14 23:24:07 attacker malicious-activity
SQL Injection AbuseIPDB 2025-02-14 12:00:11 2026-08-14 14:16:06 attacker malicious-activity
Malicious Host AbuseIPDB 2025-02-14 15:35:37 2026-08-13 11:57:08 attacker compromised malicious-activity
Proxy AbuseIPDB 2026-08-06 12:36:51 2026-08-06 12:36:52 anonymization
Mail Spammer Blocklist.de 2025-07-28 08:19:45 2025-08-25 07:31:48 malicious-activity
IMAP Attacker Blocklist.de 2025-07-29 07:58:10 2025-08-25 07:13:56 malicious-activity
Brute force attack on the SMTP service of the server S25 Blocklist.net.ua 2025-08-23 09:58:00 2025-08-24 09:19:43 malicious-activity
Bruteforce Blocklist.net.ua 2025-08-01 10:27:43 2025-08-01 10:27:43 malicious-activity
Mail Spammer AbuseIPDB 2024-11-21 22:24:53 2025-07-30 02:00:04 malicious-activity
Suspicious Host AbuseIPDB 2024-11-22 01:13:49 2025-07-27 01:29:58 anomalous-activity
IMAP Attacker AbuseIPDB 2024-11-23 03:25:02 2025-07-25 03:58:03 malicious-activity
DDoS attack AbuseIPDB 2025-02-18 09:01:00 2025-02-18 09:01:00 malicious-activity
Brute force attack on the SMTP service of the server S2 Blocklist.net.ua 2024-11-23 12:02:40 2024-11-23 12:02:40 malicious-activity
Malicious Host HoneyDB 2023-04-24 00:00:00 2023-05-15 00:00:00 malicious-activity
Malicious Host CIArmy 2023-04-13 08:43:20 2023-05-04 07:55:35 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2023-04-15 09:26:43 2023-05-03 11:16:08 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2023-04-15 09:26:38 2023-05-03 11:16:03 malicious-activity

Tags

abuse mail spam attacker imap pop3 sasl bot apache ddos rfi login bruteforce joomla wordpress

Whois information

AS name
AS210558 1337 Services GmbH
AS registry
ripencc
AS date
2019-08-07 00:00:00
AS CIDR
45.138.16.0/24
CIDR
45.138.16.0/24
Registrant
1337 Services GmbH
Address
Ludwig-Erhard-Str. 18 DE-20459 Hamburg Germany
City
Warsaw
Postal code
00-510
Country
PL — Poland 🇵🇱
Contact email
[email protected]
First indexed
2023-04-13 08:43:20
Last updated
2026-10-13 00:15:00

Malicious IPs in the same CIDR

45.138.16.189 45.138.16.214 45.138.16.184 45.138.16.62 45.138.16.95 45.138.16.70 45.138.16.237 45.138.16.240 45.138.16.156 45.138.16.159 45.138.16.222 45.138.16.110 45.138.16.69 45.138.16.231 45.138.16.127 45.138.16.44 45.138.16.42 45.138.16.99 45.138.16.121 45.138.16.76 45.138.16.125 45.138.16.164 45.138.16.239