JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.138.12.52

45.138.12.52 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	TC DATACENTER LIMITED MANAGED IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218785
Domain Name	tcdatacenter.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.138.12.52

Whois 45.138.12.52

IP Abuse Reports for 45.138.12.52:

This IP address has been reported a total of 134 times from 107 distinct sources. 45.138.12.52 was first reported on September 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Incidents Response Neptus Team	2026-09-20 04:08:00 (1 hour ago)	Report Abuse IP	Exploited Host Web App Attack Hacking
Anonymous	2026-09-20 04:07:06 (1 hour ago)	Abuse detected: rate-limit and/or cross-site thresholds exceeded.	Bad Web Bot
Anonymous	2026-09-20 03:52:13 (1 hour ago)	Reported from Nginx log analysis 16. Log: 45.138.12.52 - - [20/Sep/2026:xx:xx:xx 0200] "GET / HTTP/ ... show more Reported from Nginx log analysis 16. Log: 45.138.12.52 - - [20/Sep/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "LT Lithuania -" "AS218785" "Tc Datacenter Limited" show less	Port Scan Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-20 03:12:47 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.138.12.52 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.138.12.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 23:12:41.308216 2026] [security2:error] [pid 5566:tid 5566] [client 45.138.12.52:34924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astrologyia.com.verdadesreales.com"] [uri "/.git/HEAD"] [unique_id "aq9PKeMz5hbz1PohPmD6CgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marco711	2026-09-20 03:11:45 (2 hours ago)	port/URL scanning	Port Scan Web App Attack
🇨🇿 ddw	2026-09-20 03:11:07 (2 hours ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇵🇱 gandaflux	2026-09-20 03:09:23 (2 hours ago)	45.138.12.52 [redacted-domain] - [20/Sep/2026:05:09:16 +0200] "GET /wp-content/plugins/cookie-law-in ... show more 45.138.12.52 [redacted-domain] - [20/Sep/2026:05:09:16 +0200] "GET /wp-content/plugins/cookie-law-info/lite/frontend/js/script.min.js.map HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 [redacted-domain] - [20/Sep/2026:05:09:16 +0200] "GET /wp-includes/js/jquery/jquery.min.js.map HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 [redacted-domain] - [20/Sep/2026:05:09:16 +0200] "GET /wp-includes/js/jquery/jquery-migrate.min.js.map HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 [redacted-domain] - [20/Sep/2026:05:09:16 +0200] "GET /wp-content/plugins/tiktok-for-business/admin/js/ajaxsnippet.js.map HTTP/1.1" 404 158 " show less	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-09-20 03:09:17 (2 hours ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-09-20 03:08:41 (2 hours ago)	45.138.12.52 - - [20/Sep/2026:05:08:41 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ... show more 45.138.12.52 - - [20/Sep/2026:05:08:41 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 larse99	2026-09-20 03:04:35 (2 hours ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇳🇱 Alt255	2026-09-20 02:57:14 (2 hours ago)	[cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apac ... show more [cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apache-404. Example: 45.138.12.52 - - [20/Sep/2026:04:57:02 +0200] "GET /rest/api/1.0/application-properties HTTP/1.1" 404 2408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 - - [20/Sep/2026:04:57:02 +0200] "GET /litellm/config.yaml HTTP/1.1" 404 2452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 - - [20/Sep/2026:04:57:02 +0200] "GET /litellm/config.yml HTTP/1.1" 404 2452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.52 - - [20/Sep/2026:04:57:03 +0200] "GET /litellm.yaml HTTP/1.1" 404 2452 "-" "Mozil ... show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-09-20 02:54:42 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-20 02:42:37 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.138.12.52 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.138.12.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 22:42:32.568111 2026] [security2:error] [pid 17506:tid 17506] [client 45.138.12.52:48140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1surplus.com"] [uri "/.git/HEAD"] [unique_id "aq9IGOen45mUQFCD8K6UAgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-09-20 02:24:23 (3 hours ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇦🇺 rubixstudios	2026-09-20 01:48:02 (3 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.197.13

🇳🇱 185.242.226.61

🇺🇸 174.67.188.60

🇨🇳 119.96.193.72

🇨🇳 220.197.20.135

🇺🇸 207.46.13.18

🇺🇸 205.210.31.103

🇨🇱 190.114.33.10

🇧🇷 189.113.135.202

🇪🇨 186.68.83.105

🇲🇾 165.154.147.69

🇺🇸 155.94.233.59

🇮🇱 147.235.195.87

🇨🇳 115.190.181.231

🇧🇬 109.160.32.76

🇧🇬 78.128.113.46

🇺🇸 73.204.210.114

🇺🇸 71.6.158.166

🇳🇱 45.198.224.145

🇨🇦 45.194.92.106