JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.138.12.142

Recent Activity

Abuse confidence score ?

100% Critical

54 reports

40 reporters · latest 34 seconds ago

ISP	TC DATACENTER LIMITED MANAGED IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218785
Domain Name	tcdatacenter.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.138.12.142

Export CSV

This IP address has been reported a total of 54 times from 40 distinct sources. 45.138.12.142 was first reported on October 23rd 2026, and the most recent report was 34 seconds ago. In the last 60 days, the top reporter locations were: United States of America with 20 reports; Netherlands with 9 reports; Germany with 7 reports. The most common categories in these recent reports were: Web App Attack 44 times; Brute-Force 27 times; Bad Web Bot 23 times; Hacking 9 times; DDoS Attack 3 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-10-24 06:40:37 (34 seconds ago)	20 attempts against mh-misbehave-ban on grape	Brute-Force Bad Web Bot Web App Attack
🇸🇬 naveeddaros	2026-10-24 06:39:54 (1 minute ago)	HTTP Flood DDoS attack detected	Brute-Force Bad Web Bot
🇩🇪 msavo	2026-10-24 06:38:15 (2 minutes ago)	CIR Sentinel: env_probe_permanent; 3 requests in 60s; targets=/app/.env, /config/.env, /web/.env; pe ... show more CIR Sentinel: env_probe_permanent; 3 requests in 60s; targets=/app/.env, /config/.env, /web/.env; permanently blocked by the firewall. show less	Web App Attack
🇺🇸 epixian	2026-10-24 06:35:03 (6 minutes ago)	Crawl burst (214 different pages within 60 s), 275 page requests + 17 asset requests during scan int ... show more Crawl burst (214 different pages within 60 s), 275 page requests + 17 asset requests during scan interval. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-24 06:30:55 (10 minutes ago)	(caddyscan) Scanner path probe from 45.138.12.142 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 45.138.12.142 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 45.138.12.142 - - [24/Oct/2026:06:30:53 +0000] "GET /lib../.git/config HTTP/1.1" [REDACTED] 200 2627 45.138.12.142 - - [24/Oct/2026:06:30:53 +0000] "GET /img../.git/config HTTP/1.1" [REDACTED] 200 2627 45.138.12.142 - - [24/Oct/2026:06:30:53 +0000] "GET /assets../.git/config HTTP/1.1" [REDACTED] 200 2627 45.138.12.142 - - [24/Oct/2026:06:30:53 +0000] "GET /.git/index HTTP/1.1" [REDACTED] 200 2627 45.138.12.142 - - [24/Oct/2026:06:30:53 +0000] "GET /static../.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-10-24 06:09:53 (31 minutes ago)	45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /js../.git/config HTTP/1.1" 403 5507 "-" "Mozill ... show more 45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /js../.git/config HTTP/1.1" 403 5507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /.git/index HTTP/1.1" 403 5507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /events../.git/config HTTP/1.1" 403 5507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /images../.git/config HTTP/1.1" 403 5507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:08:07:39 +0200] "GET /.git/config HTTP/1.1" 403 5507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	DDoS Attack
🇺🇸 jcbriar	2026-10-24 06:06:19 (34 minutes ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2026-10-24 05:50:29 (50 minutes ago)	45.138.12.142 - - [24/Oct/2026:05:50:29 +0000] "GET /lib../.git/config HTTP/2.0" 404 14134 "-" "Mozi ... show more 45.138.12.142 - - [24/Oct/2026:05:50:29 +0000] "GET /lib../.git/config HTTP/2.0" 404 14134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-24 05:49:02 (52 minutes ago)	(mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:48:58.259669 2026] [security2:error] [pid 31697:tid 31697] [client 45.138.12.142:21565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tipocambiolatam.com"] [uri "/lib../.git/config"] [unique_id "atxGyr3CsE0Bj9VPgwRoTwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-10-24 05:45:08 (56 minutes ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-10-24 05:44:08 (57 minutes ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 Alpiskris	2026-10-24 05:40:08 (1 hour ago)	45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /lib../.git/config HTTP/1.1" 403 548 "-" "Mozill ... show more 45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /lib../.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /js../.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /css../.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /events../.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 45.138.12.142 - - [24/Oct/2026:05:39:34 +0000] "GET /media../.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-10-24 05:38:38 (1 hour ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-24 05:31:02 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:30:54.906219 2026] [security2:error] [pid 8949:tid 8949] [client 45.138.12.142:35384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daviddholt.com"] [uri "/lib../.git/config"] [unique_id "atxCjuPsmhd3ETfgMCDImwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-24 04:19:56 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.138.12.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 00:19:51.990239 2026] [security2:error] [pid 11255:tid 11255] [client 45.138.12.142:41633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpastorphotographics.com"] [uri "/js../.git/config"] [unique_id "atwx572KLdNE5Zzh-yyBlwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.194.178.40

🇺🇸 147.135.7.63

🇺🇸 91.230.168.170

🇳🇱 45.148.10.211

🇩🇪 213.202.219.125

🇳🇱 145.90.8.11

🇷🇴 135.136.123.224

🇰🇷 121.165.8.169

🇸🇬 101.47.8.113

🇺🇸 98.174.32.171

🇧🇬 89.106.119.135

🇮🇷 87.107.195.51

🇪🇸 83.50.7.7

🇬🇧 77.67.26.182

🇺🇸 66.132.159.20

🇮🇩 43.133.131.35

🇺🇸 34.162.8.71

🇺🇸 34.67.43.170

🇭🇺 31.46.252.135

🇨🇦 212.56.49.45