JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.132.186.11

185.132.186.11 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 34%: ?

34%

ISP	Digital Resources Management S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	digitalrm.es
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.132.186.11

Whois 185.132.186.11

IP Abuse Reports for 185.132.186.11:

This IP address has been reported a total of 49 times from 28 distinct sources. 185.132.186.11 was first reported on July 2nd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-06-30 19:47:05 (2 days ago)	(wordpress) Failed wordpress login from 185.132.186.11 (-)	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-09 17:55:02 (3 weeks ago)	185.132.186.11 - - [09/Jun/2026:20:55:01 +0300] "GET /wp-content/ HTTP/1.1" 404 709 "-" "Mozilla/5.0 ... show more 185.132.186.11 - - [09/Jun/2026:20:55:01 +0300] "GET /wp-content/ HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.132.186.11 - - [09/Jun/2026:20:55:01 +0300] "GET /wp-admin/maint/ HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" ... show less	Web App Attack
Anonymous	2026-06-08 06:52:01 (3 weeks ago)	185.132.186.11 - - [08/Jun/2026:08:47:12 +0200] "GET /wordpress/wp-includes/class-wp-http-ixr-client ... show more 185.132.186.11 - - [08/Jun/2026:08:47:12 +0200] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.132.186.11 - - [08/Jun/2026:08:47:13 +0200] "GET /images/bypass.php HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.132.186.11 - - [08/Jun/2026:08:47:13 +0200] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.132.186.11 - - [08/Jun/2026:08:47:14 +0200] "GET /wp-content/edit.php HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.132.186.11 - - [08/Jun/2026:08:47:15 +0200] "GET /wp-content/autoload_classmap.php HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/53 ... show less	DDoS Attack
🇬🇧 consul.to	2026-06-07 16:16:01 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-05 23:43:05 (3 weeks ago)	Aggressive web search of vulnerable pages: /.tmb/doc.php /wp-editor.php /wp-includes/style-engine-se ... show more Aggressive web search of vulnerable pages: /.tmb/doc.php /wp-editor.php /wp-includes/style-engine-session.php /images/install.php /vendor/phpun ... show less	Web App Attack
🇷🇺 sms.ru	2026-06-05 23:33:31 (3 weeks ago)	/wp-admin/images/bootstrap.php	Web App Attack
🇬🇧 consul.to	2026-06-03 09:24:27 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 cmbplf	2026-05-23 11:44:35 (1 month ago)	1.091 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2026-05-23 09:06:13 (1 month ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-05-23 08:26:01 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 185.132.186.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 185.132.186.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 04:25:55.394167 2026] [security2:error] [pid 22632:tid 22632] [client 185.132.186.11:40019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crittergetterpestcontrol.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahFkkxsulqA3XtjLYca-YgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-03-16 17:58:40 (3 months ago)	185.132.186.11 - - [16/Mar/2026:17:58:33 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 123 ... show more 185.132.186.11 - - [16/Mar/2026:17:58:33 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 1234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 185.132.186.11 - - [16/Mar/2026:17:58:35 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 185.132.186.11 - - [16/Mar/2026:17:58:35 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-03-10 00:25:10 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-07 00:20:25 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇬🇧 consul.to	2026-02-19 04:47:39 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-02-18 17:19:11 (4 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.108

🇩🇪 164.90.232.37

🇺🇸 107.150.104.66

🇺🇸 100.29.192.92

🇧🇾 86.57.206.26

🇩🇪 69.5.169.47

🇰🇷 211.37.174.180

🇺🇸 205.210.31.42

🇦🇪 198.38.94.14

🇩🇪 185.220.101.101

🇧🇷 177.36.214.46

🇵🇰 103.200.196.155

🇮🇳 103.25.47.94

🇺🇸 91.230.168.143

🇳🇱 91.92.40.24

🇷🇴 2.57.121.25

🇩🇴 179.53.144.135

🇨🇳 120.48.13.21

🇹🇭 118.174.185.237

🇨🇳 112.6.114.199