JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.138.12.24

45.138.12.24 was found in our database!

This IP was reported 281 times. Confidence of Abuse is 100%: ?

100%

ISP	TC DATACENTER LIMITED MANAGED IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218785
Domain Name	tcdatacenter.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.138.12.24

Whois 45.138.12.24

IP Abuse Reports for 45.138.12.24:

This IP address has been reported a total of 281 times from 212 distinct sources. 45.138.12.24 was first reported on September 17th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇾 armandosaucedo.me	2026-09-18 22:08:39 (12 minutes ago)	Threat Intelligence via ARMTI, Web Attack: GET /.env	Web App Attack
🇩🇪 ut-addicted.com	2026-09-18 22:06:31 (14 minutes ago)	\[Sat Sep 19 00:06:29.276073 2026\] \[:error\] \[pid 2760:tid 140352702101248\] \[client 45.138.12.2 ... show more \[Sat Sep 19 00:06:29.276073 2026\] \[:error\] \[pid 2760:tid 140352702101248\] \[client 45.138.12.24:42550\] \[client 45.138.12.24\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.aws/.env"\] \[unique_id "aq215dmdcMUJUhtB3hxgPwAAAMA"\] show less	Brute-Force Web App Attack
🇺🇸 dot.mg	2026-09-18 21:57:40 (23 minutes ago)	Scan of vulnerable files	Web App Attack
🇧🇷 dominioz	2026-09-18 21:18:56 (1 hour ago)	2026-09-18 21:18:21 GET /.env - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+Appl ... show more 2026-09-18 21:18:21 GET /.env - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 301 554 2026-09-18 21:18:21 GET /.config/anthropic/credentials/default.json - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 301 630 2026-09-18 21:18:21 GET /.config/gcloud/application_default_credentials.json - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 301 648 2026-09-18 21:18:21 GET /.config/gcloud/credentials.db - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 301 604 2026-09-18 21:18:21 GET /.env.backup - - 45.138.12.24 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 301 568 ... show less	Web App Attack
🇫🇷 solution.it	2026-09-18 21:17:54 (1 hour ago)	[Fri Sep 18 23:17:53.720152 2026] [php7:error] [pid 1981975:tid 1981975] [client 45.138.12.24:54396] ... show more [Fri Sep 18 23:17:53.720152 2026] [php7:error] [pid 1981975:tid 1981975] [client 45.138.12.24:54396] script '/var/www/html/www.craccaaltesoro.it/.env.php' not found or unable to stat show less	Web App Attack
🇺🇸 dot.mg	2026-09-18 21:06:05 (1 hour ago)	Bad behaviour	Web Spam
Anonymous	2026-09-18 21:03:41 (1 hour ago)	(PERMBLOCK) 45.138.12.24 (GB/United Kingdom/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 45.138.12.24 (GB/United Kingdom/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇳🇱 Alt255	2026-09-18 21:01:45 (1 hour ago)	[ti-22al] Excessive 404 errors (web scanning): 277 suspicious requests detected by fail2ban jail apa ... show more [ti-22al] Excessive 404 errors (web scanning): 277 suspicious requests detected by fail2ban jail apache-404. Example: 45.138.12.24 - - [18/Sep/2026:23:01:32 +0200] "GET /app/config/development.ini HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:23:01:32 +0200] "GET /host.json HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:23:01:32 +0200] "GET /uwsgi.ini HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:23:01:32 +0200] "GET /.composer/composer.json HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:23:01:32 +0200] "GET /.docker.env HTTP/2.0" 404 1855 "-" "Mozi ... show less	Bad Web Bot Web App Attack
🇺🇸 paulo.apoloni	2026-09-18 21:01:15 (1 hour ago)	45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env-sample HTTP/2.0" 404 22 "-" "Mozilla/5.0 (W ... show more 45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env-sample HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env.anthropic HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env.dist HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env-example HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:18:01:15 -0300] "GET /.env.mail HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇬🇧 SilverZippo	2026-09-18 20:35:28 (1 hour ago)	Web App Attack	Web App Attack
Anonymous	2026-09-18 20:12:57 (2 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Back ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇩🇪 srtzero	2026-09-18 20:08:35 (2 hours ago)	45.138.12.24 - - [18/Sep/2026:22:08:34 +0200] "GET /.env.anthropic HTTP/2.0" 404 1370 "-" "Mozilla/5 ... show more 45.138.12.24 - - [18/Sep/2026:22:08:34 +0200] "GET /.env.anthropic HTTP/2.0" 404 1370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:22:08:34 +0200] "GET /.env.aws HTTP/2.0" 404 1370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.24 - - [18/Sep/2026:22:08:34 +0200] "GET /.env.backup HTTP/2.0" 404 1370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇵🇱 alianet	2026-09-18 20:02:34 (2 hours ago)	[Fri Sep 18 20:02:33.255109 2026] [proxy_fcgi:error] [pid 1186994:tid 1187095] [client 45.138.12.24: ... show more [Fri Sep 18 20:02:33.255109 2026] [proxy_fcgi:error] [pid 1186994:tid 1187095] [client 45.138.12.24:40782] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.554818 2026] [proxy_fcgi:error] [pid 1186994:tid 1187108] [client 45.138.12.24:40836] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.855509 2026] [proxy_fcgi:error] [pid 1186994:tid 1187112] [client 45.138.12.24:40788] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.963114 2026] [proxy_fcgi:error] [pid 1186994:tid 1187123] [client 45.138.12.24:40878] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.963315 2026] [proxy_fcgi:error] [pid 1186994:tid 1187109] [client 45.138.12.24:40836] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.963785 2026] [proxy_fcgi:error] [pid 1187188:tid 1187217] [client 45.138.12.24:40768] AH01071: Got error 'Primary script unknown' [Fri Sep 18 20:02:33.974706 2026] [proxy_fcgi:error] [pid 1186994:tid 1187073] [client 45.138. ... show less	Port Scan Web App Attack
🇺🇸 oijon.net	2026-09-18 19:57:57 (2 hours ago)	[Fri Sep 18 15:57:55.246309 2026] [php:error] [pid 1036283:tid 1036283] [client 45.138.12.24:38216] ... show more [Fri Sep 18 15:57:55.246309 2026] [php:error] [pid 1036283:tid 1036283] [client 45.138.12.24:38216] script '/var/www/consus/.env.php' not found or unable to stat [Fri Sep 18 15:57:56.286424 2026] [php:error] [pid 1036407:tid 1036407] [client 45.138.12.24:38276] script '/var/www/consus/admin_phpinfo.php' not found or unable to stat [Fri Sep 18 15:57:56.814156 2026] [php:error] [pid 1036406:tid 1036406] [client 45.138.12.24:38250] script '/var/www/consus/config.php' not found or unable to stat [Fri Sep 18 15:57:57.145211 2026] [php:error] [pid 1036343:tid 1036343] [client 45.138.12.24:38266] script '/var/www/consus/info.php' not found or unable to stat [Fri Sep 18 15:57:57.152653 2026] [php:error] [pid 1036411:tid 1036411] [client 45.138.12.24:38374] script '/var/www/consus/infophp.php' not found or unable to stat ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-09-18 19:51:18 (2 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.138.12.24 (LT/Lithuania/-): 1 in the ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.138.12.24 (LT/Lithuania/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.138.12.24 - - [18/Sep/2026:21:51:15 +0200] "GET /aws.env HTTP/2.0" 508 288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "45.138.12.24" host=consorzioaet.it show less	Port Scan

Showing 1 to 15 of 281 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 176.211.106.206

🇧🇷 205.210.31.178

🇺🇸 172.56.33.70

🇫🇷 91.231.89.104

🇺🇸 66.132.195.85

🇵🇱 46.151.117.134

🇧🇪 198.235.24.136

🇳🇱 188.166.108.21

🇧🇷 187.93.68.178

🇨🇳 159.75.157.139

🇺🇸 152.32.183.31

🇫🇷 109.199.114.146

🇦🇫 74.118.81.170

🇺🇸 43.166.242.53

🇵🇰 118.107.139.224

🇺🇸 70.167.235.49

🇨🇦 51.222.86.241

🇺🇸 34.123.10.160

🇺🇸 34.122.251.232

🇺🇸 20.65.178.224