JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.138.12.26

45.138.12.26 was found in our database!

This IP was reported 250 times. Confidence of Abuse is 100%: ?

100%

ISP	TC DATACENTER LIMITED MANAGED IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218785
Domain Name	tcdatacenter.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.138.12.26

Whois 45.138.12.26

IP Abuse Reports for 45.138.12.26:

This IP address has been reported a total of 250 times from 195 distinct sources. 45.138.12.26 was first reported on September 17th 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-18 09:54:31 (9 minutes ago)	[Fri Sep 18 09:54:30.746754 2026] [security2:error] [pid 3931167:tid 3931167] [client 45.138.12.26:3 ... show more [Fri Sep 18 09:54:30.746754 2026] [security2:error] [pid 3931167:tid 3931167] [client 45.138.12.26:37640] [client 45.138.12.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lithomessiniaki.gr"] [uri "/.docker/secrets.json"] [unique_id "aq0KVqwr7E_9qA983KtzUAAAAA8"] [Fri Sep 18 09:54:30.804120 2026] [security2:error] [pid 3931184:tid 3931184] [client 45.138.12.26:37648] [client 45.138.12.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total ... show less	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-18 09:50:11 (13 minutes ago)	45.138.12.26 - - [18/Sep/2026:03:50:11 -0600] "GET /.git/config HTTP/2.0" 300 4531 "-" "Mozilla/5.0 ... show more 45.138.12.26 - - [18/Sep/2026:03:50:11 -0600] "GET /.git/config HTTP/2.0" 300 4531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇩🇪 hchristo	2026-09-18 09:45:41 (18 minutes ago)	[Fri Sep 18 11:45:40.610293 2026] [authz_core:error] [pid 1591:tid 1630] [remote 45.138.12.26:36530] ... show more [Fri Sep 18 11:45:40.610293 2026] [authz_core:error] [pid 1591:tid 1630] [remote 45.138.12.26:36530] AH01630: client denied by server configuration: /var/www/kd1099/htdocs/Kontaktliste/.env.bak [Fri Sep 18 11:45:40.611724 2026] [authz_core:error] [pid 1591:tid 1613] [remote 45.138.12.26:36530] AH01630: client denied by server configuration: /var/www/kd1099/htdocs/Kontaktliste/.env.old [Fri Sep 18 11:45:40.637873 2026] [authz_core:error] [pid 1591:tid 1631] [remote 45.138.12.26:36530] AH01630: client denied by server configuration: /var/www/kd1099/htdocs/Kontaktliste/.env.save [Fri Sep 18 11:45:40.638303 2026] [authz_core:error] [pid 1591:tid 1625] [remote 45.138.12.26:36530] AH01630: client denied by server configuration: /var/www/kd1099/htdocs/Kontaktliste/.env.swp [Fri Sep 18 11:45:40.639885 2026] [authz_core:error] [pid 1591:tid 1626] [remote 45.138.12.26:36530] AH01630: client denied by server configuration: /var/www/kd1099/htdocs/Kontaktliste/.env~ ... show less	Brute-Force
🇩🇪 maxpower	2026-09-18 09:43:46 (20 minutes ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.138.12.26 (LT/Lithuania/-): 1 in the ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.138.12.26 (LT/Lithuania/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.138.12.26 - - [18/Sep/2026:11:43:39 +0200] "GET /test/config/secrets.yml HTTP/2.0" 403 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "45.138.12.26" host=lisoladeidesideri.it show less	Port Scan
🇩🇪 Gwyneth Llewelyn	2026-09-18 09:42:07 (21 minutes ago)	2026/09/18 10:42:05 [error] 325888#325888: 152645 access forbidden by rule, client: 45.138.12.26, s ... show more 2026/09/18 10:42:05 [error] 325888#325888: 152645 access forbidden by rule, client: 45.138.12.26, server: lisboa.betatechnologies.info, request: "GET /.docker/.env HTTP/2.0", host: "lisboa.betatechnologies.info" 2026/09/18 10:42:05 [error] 325888#325888: 152659 access forbidden by rule, client: 45.138.12.26, server: lisboa.betatechnologies.info, request: "GET /.aws/.env HTTP/2.0", host: "lisboa.betatechnologies.info" 2026/09/18 10:42:05 [error] 325891#325891: 152661 access forbidden by rule, client: 45.138.12.26, server: lisboa.betatechnologies.info, request: "GET /.docker/laravel/app/.env HTTP/2.0", host: "lisboa.betatechnologies.info" show less	Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-09-18 09:41:04 (22 minutes ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇳🇱 Alt255	2026-09-18 09:36:33 (27 minutes ago)	[ti-22al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apac ... show more [ti-22al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 45.138.12.26 - - [18/Sep/2026:11:36:19 +0200] "GET /.docker/secrets.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.26 - - [18/Sep/2026:11:36:19 +0200] "GET /.config/anthropic/credentials/default.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.26 - - [18/Sep/2026:11:36:19 +0200] "GET /.docker/.env HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.26 - - [18/Sep/2026:11:36:19 +0200] "GET /.claude/settings.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.26 - - [18/Sep/2026:11:36:19 +0200] "GE ... show less	Bad Web Bot Web App Attack
🇩🇪 gadix	2026-09-18 09:33:44 (30 minutes ago)	[18/Sep/2026:11:33:43.557463 +0200] aq0Fd_ZwKaNinhUZzW9xjAAAABY 45.138.12.26 58914 127.0.0.1 7081 [1 ... show more [18/Sep/2026:11:33:43.557463 +0200] aq0Fd_ZwKaNinhUZzW9xjAAAABY 45.138.12.26 58914 127.0.0.1 7081 [18/Sep/2026:11:33:43.566880 +0200] aq0Fd_ZwKaNinhUZzW9xjwAAABI 45.138.12.26 58978 127.0.0.1 7081 [18/ ... show less	Web App Attack
Anonymous	2026-09-18 09:30:41 (33 minutes ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇩🇪 IVski.com	2026-09-18 09:27:36 (36 minutes ago)	IVski WAF \| Sensitive file probe - looking for exposed .env	DDoS Attack Bad Web Bot
🇺🇸 Sonoflet	2026-09-18 09:24:12 (39 minutes ago)	CrowdSec detection \| scenario: http-admin-interface-probing	Port Scan Web App Attack
🇩🇪 MBombeck	2026-09-18 09:16:00 (47 minutes ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
Anonymous	2026-09-18 09:14:46 (49 minutes ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇫🇮 000rosiu	2026-09-18 08:34:25 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /credentials \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 Niko's Stuff	2026-09-18 08:16:39 (1 hour ago)	Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/45.1 ... show more Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/45.138.12.26 show less	Web App Attack Hacking

Showing 1 to 15 of 250 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 88.228.65.192

🇮🇳 2401:4900:88d1:1e17:1da8:6563:b75a:f716

🇦🇷 207.248.127.236

🇭🇰 165.154.41.182

🇧🇩 163.47.156.247

🇺🇸 136.115.207.26

🇨🇳 115.190.172.63

🇰🇪 102.68.79.205

🇺🇸 98.168.103.132

🇺🇸 66.132.186.224

🇺🇸 34.16.48.75

🇷🇴 2.57.122.202

🇨🇳 203.6.235.51

🇬🇪 185.99.5.208

🇳🇵 157.15.58.176

🇦🇷 148.227.73.91

🇹🇼 111.252.25.200

🇲🇦 105.155.186.43

🇺🇸 104.131.43.9

🇨🇦 85.217.149.43