JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.4.142.6

185.4.142.6 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	PLANETEL-SPA
Usage Type	Fixed Line ISP
ASN	AS47217
Hostname(s)	pl01.planetel.it
Domain Name	planetel.it
Country	🇮🇹 Italy
City	Dalmine, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.4.142.6

Whois 185.4.142.6

IP Abuse Reports for 185.4.142.6:

This IP address has been reported a total of 11 times from 8 distinct sources. 185.4.142.6 was first reported on May 21st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-09 07:32:40 (2 weeks ago)	185.4.142.6 - - [09/Jun/2026:09:32:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; In ... show more 185.4.142.6 - - [09/Jun/2026:09:32:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 15:00:46 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:00:41.242407 2026] [security2:error] [pid 22270:tid 22270] [client 185.4.142.6:53660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artspacecleveland.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artspacecleveland.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiWHmTxoM4rOtxBzfxyXUQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-06-07 14:45:26 (3 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 08:28:21 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 04:28:14.126793 2026] [security2:error] [pid 24775:tid 24775] [client 185.4.142.6:39848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barkatthemoonpetsitting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barkatthemoonpetsitting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiUrnlJgryLsavqq1FDpzgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 14:58:25 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 10:58:21.231555 2026] [security2:error] [pid 19186:tid 19186] [client 185.4.142.6:55952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ciptaconindotara.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiQ1jbtwgNwOa09HGVZCLAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 21:18:55 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 17:18:48.988400 2026] [security2:error] [pid 31826:tid 31826] [client 185.4.142.6:49068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|votmuli.com.greenlight.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "votmuli.com.greenlight.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiCaOBr216hOE4vkC90RkgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-02 05:13:51 (3 weeks ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 185.4.142.6 (IT/Italy/pl01.planetel.it): 1 in ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 185.4.142.6 (IT/Italy/pl01.planetel.it): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Hazzard	2026-05-26 03:08:30 (1 month ago)	(wordpress) Failed wordpress login from 185.4.142.6 (IT/Italy/Province of Milan/Legnano/pl01.planete ... show more (wordpress) Failed wordpress login from 185.4.142.6 (IT/Italy/Province of Milan/Legnano/pl01.planetel.it/[redacted]): (CF_ENABLE) show less	Brute-Force
🇮🇹 VHosting	2026-05-22 04:21:26 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 tecnicorioja	2026-05-21 22:00:27 (1 month ago)	wp-login attack [21/May/2026:20:53:08	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-21 08:20:13 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.35

🇮🇳 152.32.158.219

🇺🇸 147.185.132.144

🇨🇳 120.192.179.168

🇵🇱 109.205.211.91

🇺🇸 207.90.244.18

🇨🇳 182.44.12.151

🇺🇸 66.132.224.18

🇺🇸 66.132.195.104

🇩🇴 45.172.152.74

🇲🇽 200.76.246.30

🇹🇷 185.153.231.45

🇩🇪 178.105.9.204

🇺🇸 170.62.3.227

🇷🇴 92.118.39.71

🇷🇺 5.165.19.3

🇧🇩 203.96.224.70

🇳🇱 185.242.226.59

🇩🇪 162.19.230.21

🇮🇱 79.177.143.124