45.138.16.189
Classification: Malicious
45.138.16.189 is a malicious IP address in Warsaw, PL. Linked to Asyncrat malware. 159 sightings from 8 threat sources, last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- TOR node — Part of the TOR anonymization network.
- Open proxy — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2026-08-27 07:03:22 | 2026-10-16 11:06:59 | attacker malicious-activity | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2026-07-07 13:03:13 | 2026-09-21 11:02:24 | anomalous-activity anonymization tor | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2026-07-07 13:02:01 | 2026-09-21 11:01:39 | anomalous-activity anonymization tor | |
| TOR Exit Node | TorProject.org | 2026-07-05 12:03:21 | 2026-09-18 10:03:03 | anomalous-activity anonymization tor | |
| Parasite SEO | Blocklist.net.ua | 2026-09-15 16:03:50 | 2026-09-15 16:03:50 | attacker malicious-activity | |
| TOR Node | IPWhois.io | 2026-09-04 11:50:34 | 2026-09-04 11:50:34 | anomalous-activity anonymization tor | |
| Malicious Host | HoneyDB | 2026-08-05 00:00:00 | 2026-08-18 00:00:00 | attacker malicious-activity | |
| Anonymizer | FireHOL | 2026-07-13 20:59:21 | 2026-08-04 20:38:24 | anomalous-activity anonymization | |
| Proxy | FireHOL | 2026-07-13 21:56:40 | 2026-07-18 21:58:24 | anomalous-activity anonymization proxy | |
| AsyncRAT | ThreatFox Abuse.ch | 2025-03-01 12:17:08 | 2025-03-03 11:24:01 | malicious-activity | S1087 AsyncRAT |
Tags
as210558 asyncrat c2 censys rat services-1337-gmbh port:7707 tor anonymization bot abuseWhois information
- AS name
- AS210558 1337 Services GmbH
- AS registry
- ripencc
- AS date
- 2019-08-07 00:00:00
- AS CIDR
- 45.138.16.0/24
- Registrant
- 1337 Services GmbH
- City
- Warsaw
- Postal code
- 00-693
- Country
- PL — Poland 🇵🇱
- First indexed
- 2025-03-01 12:17:08
- Last updated
- 2026-10-16 11:06:59
Malicious IPs in the same CIDR
45.138.16.214 45.138.16.184 45.138.16.62 45.138.16.95 45.138.16.70 45.138.16.237 45.138.16.189 45.138.16.240 45.138.16.156 45.138.16.159 45.138.16.222 45.138.16.110 45.138.16.69 45.138.16.231 45.138.16.127 45.138.16.44 45.138.16.42 45.138.16.99 45.138.16.121 45.138.16.76 45.138.16.125 45.138.16.164 45.138.16.239