JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.197.12.155

46.197.12.155 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 66%: ?

66%

ISP	Turksat Uydu Haberlesme ve Kablo TV Isletme A.S.
Usage Type	Fixed Line ISP
ASN	AS47524
Domain Name	turksat.com.tr
Country	🇹🇷 Turkey
City	Antalya, Antalya

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.197.12.155

Whois 46.197.12.155

IP Abuse Reports for 46.197.12.155:

This IP address has been reported a total of 19 times from 14 distinct sources. 46.197.12.155 was first reported on November 30th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 QT	2026-06-29 13:39:44 (6 days ago)	Unauthorised WordPress admin login attempted at 2026-06-29 23:39:43 +1000	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 14:40:20 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:40:12.072463 2026] [security2:error] [pid 20218:tid 20218] [client 46.197.12.155:20393] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.197.12.155 (+1 hits since last alert)\|lakependoreillemobility.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lakependoreillemobility.com"] [uri "/xmlrpc.php"] [unique_id "akEyTMxUbd3KUZ--aYQJJAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-06-28 12:28:21 (1 week ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-28 12:24:22 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 masterguru	2026-06-28 11:10:58 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-28 10:43:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 06:43:06.422515 2026] [security2:error] [pid 1923:tid 1923] [client 46.197.12.155:21054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.197.12.155 (+1 hits since last alert)\|mfleetservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mfleetservice.com"] [uri "/xmlrpc.php"] [unique_id "akD6urPqP_kBmEcESbVgUQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 05:23:19 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 01:23:12.305633 2026] [security2:error] [pid 27135:tid 27135] [client 46.197.12.155:20351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.197.12.155 (+1 hits since last alert)\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hendersonhomes.com"] [uri "/xmlrpc.php"] [unique_id "akCvwO-ouufyyTR2kWu_qgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-28 05:23:13 (1 week ago)	(wordpress) Failed wordpress login from 46.197.12.155 (TR/Türkiye/-)	Brute-Force
Anonymous	2026-06-27 23:06:03 (1 week ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 22:10:06 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 18:09:59.252764 2026] [security2:error] [pid 9445:tid 9445] [client 46.197.12.155:20705] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.197.12.155 (+1 hits since last alert)\|doctoredwinalvarez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "doctoredwinalvarez.com"] [uri "/xmlrpc.php"] [unique_id "akBKN8xeoTY4QKFQA_FejgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-27 21:37:28 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 03:17:44 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 23:17:40.377847 2026] [security2:error] [pid 18100:tid 18100] [client 46.197.12.155:21195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.197.12.155 (+1 hits since last alert)\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "exhaustthelimits.org"] [uri "/xmlrpc.php"] [unique_id "aj9A1HOMAiL_8UMbWFEqXAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 01:16:04 (1 week ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=basoukeasmd.gr; logs=/var/log/httpd/domains/basoukeasmd.gr.l ... show more [ns41.kdns.gr] httpd-xmlrpc-post: sites=basoukeasmd.gr; logs=/var/log/httpd/domains/basoukeasmd.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-06-27 00:20:01 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 46.197.12.155 (TR/Türkiye/-): 5 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 46.197.12.155 (TR/Türkiye/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-06-26 23:27:52 (1 week ago)	3.184 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 48.214.144.191

🇸🇾 191.44.71.176

🇫🇷 185.177.72.58

🇵🇱 176.53.159.198

🇺🇸 173.239.211.91

🇮🇳 152.32.158.74

🇱🇹 45.227.254.170

🇵🇹 2a01:11:221:c510:1c9d:926f:9e42:12c0

🇮🇳 2401:4900:1c3d:4b90:5a3:f925:d764:53db

🇳🇱 2001:67c:e60:c0c:192:42:116:112

🇪🇸 185.214.138.42

🇺🇸 181.215.65.205

🇵🇰 154.81.228.157

🇸🇬 152.32.218.149

🇨🇳 117.50.208.104

🇨🇳 110.166.87.119

🇧🇬 79.124.40.126

🇮🇳 202.53.94.246

🇵🇰 153.117.6.152

🇨🇳 119.97.189.120