JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.138.16.214

45.138.16.214 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	45.138.16.214.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.138.16.214

Whois 45.138.16.214

IP Abuse Reports for 45.138.16.214:

This IP address has been reported a total of 172 times from 94 distinct sources. 45.138.16.214 was first reported on March 20th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-15 07:06:21 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 Peregrine	2026-08-15 03:16:37 (2 weeks ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.138.16.214 162.158.172.11 - - [12/Aug/2026:00:45 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.138.16.214 162.158.172.11 - - [12/Aug/2026:00:45:46 -0300] "GET /wp-admin/install.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-08-14 03:14:06 (2 weeks ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.138.16.214 162.158.172.11 - - [12/Aug/2026:00:45 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.138.16.214 162.158.172.11 - - [12/Aug/2026:00:45:46 -0300] "GET /wp-admin/install.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-08-13 16:01:45 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-08-13 15:40:04 (2 weeks ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01]	Hacking SQL Injection Web App Attack
Anonymous	2026-08-13 15:12:18 (2 weeks ago)	2026-08-13 17:12:16,979 fail2ban.actions [637]: NOTICE [apache-custom] Ban 45.138.16.214 202 ... show more 2026-08-13 17:12:16,979 fail2ban.actions [637]: NOTICE [apache-custom] Ban 45.138.16.214 2026-08-13 17:12:17,178 fail2ban.actions [637]: NOTICE [apache-noscript] Ban 45.138.16.214 2026-08-13 17:12:17,628 fail2ban.actions [637]: NOTICE [apache-php-scans] Ban 45.138.16.214 ... show less	Brute-Force Web App Attack
🇩🇪 maxpower	2026-08-13 15:07:35 (2 weeks ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 45.138.16.214 (PL/Poland/45.138.16.214.powered.by.r ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 45.138.16.214 (PL/Poland/45.138.16.214.powered.by.rdp.sh): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.138.16.214 - - [13/Aug/2026:17:07:33 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 11031 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.138.16.214" host=essenzaestetica.eu show less	Port Scan
🇫🇷 pm33	2026-08-13 13:15:00 (2 weeks ago)	Unauthorized connections HTTP 403	Web App Attack
🇩🇪 psauxit	2026-08-13 05:23:03 (2 weeks ago)	Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping	Bad Web Bot Web App Attack Hacking Web Spam
🇳🇱 Site.eu	2026-08-13 04:35:32 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇮🇩 Burayot	2026-08-13 04:11:51 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.138.16.214 (PL/Poland/45.138.16. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.138.16.214 (PL/Poland/45.138.16.214.powered.by.rdp.sh): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-08-13 04:09:36 (2 weeks ago)	45.138.16.214 - - [13/Aug/2026:12:09:32 +0800] "POST /wp-plain.php HTTP/1.1" 404 360 "www.google.com ... show more 45.138.16.214 - - [13/Aug/2026:12:09:32 +0800] "POST /wp-plain.php HTTP/1.1" 404 360 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.138.16.214 - - [13/Aug/2026:12:09:32 +0800] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 61486 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.138.16.214 - - [13/Aug/2026:12:09:32 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 61055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.138.16.214 - - [13/Aug/2026:12:09:32 +0800] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 61486 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chr ... show less	Bad Web Bot Web App Attack
🇩🇪 ut-addicted.com	2026-08-13 01:27:28 (2 weeks ago)	\[Thu Aug 13 03:27:25.386776 2026\] \[:error\] \[pid 11378:tid 140352545588992\] \[client 45.138.16. ... show more \[Thu Aug 13 03:27:25.386776 2026\] \[:error\] \[pid 11378:tid 140352545588992\] \[client 45.138.16.214:55999\] \[client 45.138.16.214\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/wp-plain.php"\] \[unique_id "an0dfRzOOxy8UYYm26mPNAAAAMg"\], referer: www.google.com show less	Brute-Force Web App Attack
Anonymous	2026-08-12 22:51:50 (2 weeks ago)	2026-08-13T00:51:49.994373+02:00 firewall[3703526]: CRITICAL: #1934413: BASE64-encoded injection fr ... show more 2026-08-13T00:51:49.994373+02:00 firewall[3703526]: CRITICAL: #1934413: BASE64-encoded injection from 45.138.16.214 on www show less	Web App Attack
🇩🇪 yvoictra	2026-08-12 22:20:46 (2 weeks ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.234

🇺🇸 195.184.76.112

🇺🇸 195.62.47.136

🇨🇳 183.185.170.155

🇩🇪 172.71.164.228

🇺🇸 158.94.187.48

🇺🇸 147.185.132.43

🇷🇺 88.201.246.243

🇦🇺 64.139.57.55

🇨🇳 39.106.225.153

🇧🇪 34.77.166.77

🇺🇸 20.14.74.196

🇺🇸 2600:1900:4120:e3fb:0:7a::

🇬🇧 213.166.84.42

🇧🇷 205.210.31.143

🇳🇱 193.176.31.217

🇭🇰 185.242.233.147

🇦🇷 181.15.211.108

🇺🇸 165.154.163.160

🇿🇦 105.214.63.77