JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 78.191.50.245

78.191.50.245 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 66%: ?

66%

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Fixed Line ISP
ASN	AS9121
Hostname(s)	78.191.50.245.dynamic.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 78.191.50.245

Whois 78.191.50.245

IP Abuse Reports for 78.191.50.245:

This IP address has been reported a total of 17 times from 11 distinct sources. 78.191.50.245 was first reported on July 14th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ipoac.nl	2026-07-25 00:44:34 (2 hours ago)	-:443 78.191.50.245 - - [25/Jul/2026:02:44:33 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 6419 "-" "Moz ... show more -:443 78.191.50.245 - - [25/Jul/2026:02:44:33 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 6419 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" show less	Bad Web Bot
🇫🇮 inlink.ltd	2026-07-24 20:39:13 (6 hours ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 rh24	2026-07-24 03:09:03 (1 day ago)	(wordpress) Failed wordpress login from 78.191.50.245 (TR/Türkiye/78.191.50.245.dynamic.ttnet.com.tr ... show more (wordpress) Failed wordpress login from 78.191.50.245 (TR/Türkiye/78.191.50.245.dynamic.ttnet.com.tr): (CF_ENABLE) show less	Brute-Force
🇩🇪 4server	2026-07-22 21:10:26 (2 days ago)	[WedJul2223:10:23.7903702026][security2:error][pid718653:tid718772][client78.191.50.245:0]ModSecurit ... show more [WedJul2223:10:23.7903702026][security2:error][pid718653:tid718772][client78.191.50.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gualandi.ch\"][uri\"/xmlrpc.php\"][unique_id\"amExv34GBSPJjaEbNzMNsAAAAA4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 rh24	2026-07-22 18:54:07 (2 days ago)	(xmlrpc_405) XMLRPC-Bot 405 78.191.50.245 (TR/Türkiye/78.191.50.245.dynamic.ttnet.com.tr)	Hacking
🇺🇸 TPI-Abuse	2026-07-20 22:06:14 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 78.191.50.245 (78.191.50.245.dynamic.ttnet.com. ... show more (mod_security) mod_security (id:225170) triggered by 78.191.50.245 (78.191.50.245.dynamic.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:06:10.947118 2026] [security2:error] [pid 968887:tid 968887] [client 78.191.50.245:55196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|newcitypark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newcitypark.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al6b0r4gCkUAYUajdQIZjgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 22:02:32 (4 days ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 lostswordfish.com	2026-07-20 20:56:02 (4 days ago)	Wordfence waf block on madesimpleskincare	Web App Attack
🇳🇿 Tripwire	2026-07-20 19:25:00 (4 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇩🇪 4server	2026-07-19 00:29:18 (6 days ago)	[SunJul1902:29:12.7931232026][security2:error][pid3340047:tid3340087][client78.191.50.245:0]ModSecur ... show more [SunJul1902:29:12.7931232026][security2:error][pid3340047:tid3340087][client78.191.50.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"simireinigung.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwaWGzIox-trc1F0XvHDwAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-18 22:34:56 (6 days ago)		Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-18 21:25:43 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 02:36:41 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 78.191.50.245 (78.191.50.245.dynamic.ttnet.com. ... show more (mod_security) mod_security (id:225170) triggered by 78.191.50.245 (78.191.50.245.dynamic.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 22:36:33.733607 2026] [security2:error] [pid 5534:tid 5534] [client 78.191.50.245:59443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ndsbenefitconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ndsbenefitconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alrmsZVJGKsZIRX-1FDf4gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-07-17 23:42:52 (1 week ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇩🇪 4server	2026-07-17 05:45:28 (1 week ago)	[FriJul1707:45:23.4655452026][security2:error][pid1191276:tid1191283][client78.191.50.245:0]ModSecur ... show more [FriJul1707:45:23.4655452026][security2:error][pid1191276:tid1191283][client78.191.50.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"hdcadvisory.ch\"][uri\"/xmlrpc.php\"][unique_id\"alnBc4VGP8ARBjshXK16DwAAAAQ\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.231.78.11

🇷🇴 92.118.39.225

🇳🇱 172.94.9.203

🇺🇸 162.216.150.42

🇺🇸 154.92.23.249

🇨🇳 117.158.138.160

🇭🇰 101.36.107.233

🇫🇷 91.196.152.33

🇨🇦 85.217.149.33

🇫🇷 85.217.140.15

🇺🇸 66.132.172.235

🇳🇴 51.120.70.186

🇫🇷 51.75.118.97

🇺🇸 162.216.150.124

🇳🇱 146.190.21.73

🇺🇸 136.66.150.158

🇨🇳 123.232.135.241

🇮🇩 103.97.101.25

🇨🇭 89.217.174.207

🇸🇬 84.75.155.200