JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.196.152.213

46.196.152.213 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 70%: ?

70%

ISP	Turksat Kablo
Usage Type	Fixed Line ISP
ASN	AS47524
Domain Name	turksatkablo.com.tr
Country	🇹🇷 Turkey
City	Gaziantep, Gaziantep

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.196.152.213

Whois 46.196.152.213

IP Abuse Reports for 46.196.152.213:

This IP address has been reported a total of 19 times from 13 distinct sources. 46.196.152.213 was first reported on September 2nd 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-16 19:08:32 (19 hours ago)	[WedSep1621:08:27.8413442026][security2:error][pid1122376:tid1122461][client46.196.152.213:0]ModSecu ... show more [WedSep1621:08:27.8413442026][security2:error][pid1122376:tid1122461][client46.196.152.213:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"enricoalbertini.com\"][uri\"/xmlrpc.php\"][unique_id\"aqrpKyjKY2ZYYW92uXjJnAAAAJg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 Olexiy Backend	2026-09-16 18:01:00 (20 hours ago)	46.196.152.213 ...	Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-09-15 17:22:11 (1 day ago)	46.196.152.213 - - [15/Sep/2026:19:22:10 +0200] "POST /xmlrpc.php HTTP/1.1" 302 5277 "-" "Mozilla/5. ... show more 46.196.152.213 - - [15/Sep/2026:19:22:10 +0200] "POST /xmlrpc.php HTTP/1.1" 302 5277 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/78.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-09-13 15:19:39 (3 days ago)	(wordpress) Failed wordpress login from 46.196.152.213 (TR/Türkiye/-)	Brute-Force
🇫🇷 /dev/null	2026-09-13 13:03:30 (4 days ago)	Web attack \| malicious scanning detected.	Hacking Web App Attack
🇩🇪 stinpriza	2026-09-13 06:36:40 (4 days ago)	Web App Attack	Web App Attack
🇳🇱 i-turnradio.nl	2026-09-11 22:54:44 (5 days ago)	2026-09-12 @ 00:54:39 (CET) ~ Blocked for trying to access: /xmlrpc.php	Web App Attack
🇩🇪 big-cloud.nl	2026-09-11 17:14:12 (5 days ago)	Try to access /de-ideale-stookmix//xmlrpc.php	Web App Attack
🇩🇪 4server	2026-09-10 22:05:00 (6 days ago)	[FriSep1100:04:55.9398892026][security2:error][pid842155:tid842678][client46.196.152.213:0]ModSecuri ... show more [FriSep1100:04:55.9398892026][security2:error][pid842155:tid842678][client46.196.152.213:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fondazionepetronillapontirone.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqMph1NHf6AXqLNEW-YbzAAAAIU\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 maxpower	2026-09-10 21:55:46 (6 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 46.196.152.213 (TR/TÃ¼rkiye/-): 1 in the last ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 46.196.152.213 (TR/TÃ¼rkiye/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 46.196.152.213 - - [10/Sep/2026:23:55:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12177 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/74.0.0.0 Safari/537.36" "-" host=fondazioneilcireneo.it show less	Port Scan
🇩🇪 LRob	2026-09-07 16:30:06 (1 week ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-09-07 16:30 UTC show less	Hacking Web App Attack
🇮🇹 VHosting	2026-09-06 23:15:03 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-06 21:29:48 (1 week ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-09-06 21:29 UTC show less	Hacking Web App Attack
Anonymous	2026-09-06 19:51:57 (1 week ago)	[redacted] 46.196.152.213 - - [06/Sep/2026:21:51:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" " ... show more [redacted] 46.196.152.213 - - [06/Sep/2026:21:51:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/79.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:21:51:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/71.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:21:51:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:21:51:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:21:51:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleW ... show less	Hacking Web App Attack
Anonymous	2026-09-06 15:47:36 (1 week ago)	[redacted] 46.196.152.213 - - [06/Sep/2026:17:46:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" " ... show more [redacted] 46.196.152.213 - - [06/Sep/2026:17:46:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:17:46:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:17:46:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:17:46:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/84.0.0.0 Safari/537.36" [redacted] 46.196.152.213 - - [06/Sep/2026:17:47:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Linux; Androi ... show less	Hacking Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 213.235.33.106

🇮🇩 202.145.0.18

🇸🇬 165.154.29.144

🇺🇸 34.207.48.250

🇿🇦 165.16.182.159

🇩🇪 158.94.208.220

🇰🇪 102.204.12.198

🇦🇪 83.110.222.103

🇺🇸 73.247.171.188

🇺🇸 66.206.12.186

🇻🇳 42.1.65.123

🇺🇸 40.124.186.144

🇨🇿 31.30.160.99

🇨🇳 221.10.70.210

🇨🇳 221.5.224.71

🇹🇳 197.0.227.79

🇺🇦 188.239.115.159

🇧🇷 177.185.249.228

🇻🇳 171.244.40.247

🇨🇦 159.89.117.122