JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.138.12.65

Recent Activity

Abuse confidence score ?

100% Critical

269 reports

173 reporters · latest 3 hours ago

ISP	TC DATACENTER LIMITED MANAGED IP SPACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218785
Domain Name	tcdatacenter.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.138.12.65

Export CSV

This IP address has been reported a total of 269 times from 173 distinct sources. 45.138.12.65 was first reported on October 11th 2026, and the most recent report was 3 hours ago. In the last 60 days, the top reporter locations were: Germany with 59 reports; United States of America with 58 reports; Netherlands with 37 reports. The most common categories in these recent reports were: Web App Attack 210 times; Bad Web Bot 93 times; Brute-Force 90 times; Hacking 54 times; SQL Injection 11 times; Other 26 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-14 17:36:41 (3 hours ago)	CrowdSec blocked IP for crowdsecurity/fortinet-cve-2018-13379 on vps_agent	Hacking Web App Attack
Anonymous	2026-10-14 17:21:36 (3 hours ago)	CrowdSec blocked IP for crowdsecurity/http-probing on vps_agent	Web App Attack
🇫🇮 [email protected]	2026-10-14 17:17:22 (3 hours ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on ideaviihde.com (Direct ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on ideaviihde.com (Directory traversal #1) 45.138.12.65 (LT/Lithuania/-): 1 in the last 3600 secs (CF_ENABLE); IP: 45.138.12.65; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇳🇱 Alt255	2026-10-14 17:14:27 (3 hours ago)	[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.138.12.65 - - [14/Oct/2026:19:14:20 +0200] "GET /.git/config HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 daytonajrw	2026-10-14 17:07:33 (3 hours ago)	Path traversal / local file read attempts: 88 requests (GETx76, POSTx12) in 78s (parallel), User-Age ... show more Path traversal / local file read attempts: 88 requests (GETx76, POSTx12) in 78s (parallel), User-Agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36", status 200x26, 301x1, 403x4, 404x57. Also probed: credential/secret files, CMS/admin panels, debug/info endpoints. Paths incl. /media../.git/config, /.aws/config, /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession, /latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance, /web/.env, /cline_mcp_settings.json, /.gemini/settings.json, /app/.env show less	Web App Attack Bad Web Bot Hacking
🇩🇪 todix	2026-10-14 16:17:08 (4 hours ago)	"GET /.git/index HTTP/1.1" 301 5859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show more "GET /.git/index HTTP/1.1" 301 5859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" show less	Web App Attack
🇵🇱 Budyn	2026-10-14 16:14:21 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.store \| URI: /backup.sql \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-14 16:13:18 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇦🇺 Klaverstyn	2026-10-14 16:12:09 (4 hours ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇮🇱 spd.co.il	2026-10-14 16:02:27 (4 hours ago)	Web application attack detected	Hacking Web App Attack
🇸🇪 EmK530	2026-10-14 15:53:12 (4 hours ago)	URL flagged by RegEx: /images../.git/config	Web App Attack
🇮🇪 AutosOnShow	2026-10-14 15:07:06 (5 hours ago)	blocked for webapp attack \| path requested: /etc/profile.d/aws.sh \| seen at 2026-10-14 15:06:55.100 ... show more blocked for webapp attack \| path requested: /etc/profile.d/aws.sh \| seen at 2026-10-14 15:06:55.100 \| show less	Web App Attack
🇩🇪 Jochen Pretli	2026-10-14 11:14:18 (9 hours ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 akasolutions.de	2026-10-14 10:55:12 (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 45.138.12.65 (LT/Lithuania/-)	SQL Injection
Anonymous	2026-10-14 10:48:46 (9 hours ago)	45.138.12.65 - - [14/Oct/2026:12:48:46 +0200] "GET /img../.git/config HTTP/2.0" 301 169 "-" "Mozilla ... show more 45.138.12.65 - - [14/Oct/2026:12:48:46 +0200] "GET /img../.git/config HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.59.226

🇺🇸 152.32.235.206

🇺🇸 147.185.132.46

🇨🇳 110.179.80.31

🇺🇸 45.92.229.208

🇺🇸 34.174.21.254

🇫🇷 5.196.124.124

🇨🇦 4.172.250.34

🇷🇴 2.57.121.112

🇧🇷 205.210.31.211

🇮🇩 103.253.245.102

🇵🇰 103.12.197.122

🇳🇱 81.19.216.118

🇸🇬 43.133.61.254

🇯🇵 34.84.147.162

🇭🇰 220.246.47.146

🇺🇸 216.25.89.68

🇷🇺 213.226.113.98

🇩🇪 69.5.169.136

🇩🇪 207.154.239.168