JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.152.161.46

213.152.161.46 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 64%: ?

64%

ISP	AirVPN.org
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49453
Domain Name	airvpn.org
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.152.161.46

Whois 213.152.161.46

IP Abuse Reports for 213.152.161.46:

This IP address has been reported a total of 54 times from 26 distinct sources. 213.152.161.46 was first reported on July 17th 2025, and the most recent report was 55 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-08-22 08:50:01 (55 seconds ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 08:39:29 (11 minutes ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:39:13.477641 2026] [security2:error] [pid 4217:tid 4217] [client 213.152.161.46:54734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eta-mct.com"] [uri "/wp-config.php.html"] [unique_id "aolgMaV55t_DwnieqQ95XwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 07:40:23 (1 hour ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-22 06:21:07 (2 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /.env.example HTTP/1.1, GET /c ... show more Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /.env.example HTTP/1.1, GET /cloudflare.py HTTP/1.1, GET /wrangler.toml~ HTTP/1.1, GET /.env.save HTTP/1.1, GET /.cloudflare/config HTTP/1.1, GET /home/deautoschadeherstellers-WORDPRESS.txt HTTP/1.1, GET /wordpress/wp-config.php HTTP/1.1, GET /cloudflare.ini HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.development HTTP/1.1, GET /env.bak HTTP/1.1, GET /home/deautoschadeherstellersWORDPRESS.txt HTTP/1.1, GET /.env.production HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:11:58 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:11:44.463184 2026] [security2:error] [pid 16179:tid 16179] [client 213.152.161.46:32818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.darkalleyproductions.com"] [uri "/wp-config.php.orig"] [unique_id "aok9oCGyGAg9tE7umJzp6AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:44:03 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:43:47.003741 2026] [security2:error] [pid 19248:tid 19248] [client 213.152.161.46:35000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.circulodesonido.org"] [uri "/wp-config.php.dist"] [unique_id "aokpAy7xvcPGzH7NMSoWCgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-08-22 03:43:47 (5 hours ago)	Suspicious URL access.	Web App Attack
🇺🇸 agenciahypelab.com.br	2026-08-22 02:37:23 (6 hours ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇸🇪 vaia.cloud	2026-08-22 01:55:03 (6 hours ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-08-21 22:18:09 (10 hours ago)	Try to access /.env	Web App Attack
🇬🇧 Celtic	2026-08-21 22:16:26 (10 hours ago)	Blocked by Fail2Ban with Jail (plesk-modsecurity)	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-21 20:11:12 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 16:11:06.889238 2026] [security2:error] [pid 17586:tid 17586] [client 213.152.161.46:57504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.directcch.com"] [uri "/blog/wp-config.php"] [unique_id "aoiw2qgb0BNcQLuE7bfvuwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-18 15:33:58 (3 days ago)	Blocked by UFW (TCP on 50570) Source port: 37638 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50570) Source port: 37638 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 213.152.161.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-17 20:32:17 (4 days ago)	Blocked by UFW (TCP on 50570) Source port: 46274 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50570) Source port: 46274 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 213.152.161.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-08-04 15:30:21 (2 weeks ago)	Blocked by os-abuseipdb; 18 hits, proto=tcp,udp, ports=50765	Port Scan Brute-Force

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.138

🇨🇳 180.76.105.69

🇺🇸 168.100.149.131

🇺🇸 147.185.132.152

🇫🇷 51.254.103.32

🇨🇳 42.234.139.39

🇺🇸 172.174.245.26

🇺🇸 165.154.134.203

🇵🇰 139.135.40.107

🇨🇳 124.193.81.23

🇧🇩 113.11.100.109

🇱🇹 62.60.130.253

🇬🇧 51.195.215.224

🇬🇧 35.203.211.129

🇬🇧 35.203.211.57

🇬🇧 35.203.210.151

🇺🇸 23.94.155.87

🇬🇧 2.57.17.3

🇸🇳 196.207.227.52

🇬🇧 195.96.139.102