JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.238.231.42

185.238.231.42 was found in our database!

This IP was reported 329 times. Confidence of Abuse is 45%: ?

45%

ISP	Invermae Solutions SL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	intermanaged.com
Country	🇺🇸 United States of America
City	Denver, Colorado

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.238.231.42

Whois 185.238.231.42

IP Abuse Reports for 185.238.231.42:

This IP address has been reported a total of 329 times from 116 distinct sources. 185.238.231.42 was first reported on May 22nd 2023, and the most recent report was 54 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Blexyel	2026-07-09 16:35:53 (54 minutes ago)	185.238.231.42 - - [09/Jul/2026:18:35:53 +0200] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5. ... show more 185.238.231.42 - - [09/Jul/2026:18:35:53 +0200] "GET /wp-login.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" "pingusmc.org" ... show less	Brute-Force Web App Attack
Anonymous	2026-07-06 13:59:56 (3 days ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇩🇪 Nevermind	2026-06-08 12:27:36 (1 month ago)	185.238.231.42 - - [08/Jun/2026:14:27:34 +0200] "GET /wp-content/themes/news-portal/admins-dir.php H ... show more 185.238.231.42 - - [08/Jun/2026:14:27:34 +0200] "GET /wp-content/themes/news-portal/admins-dir.php HTTP/1.1" 404 548 "http://falkensee.info/wp-content/themes/news-portal/admins-dir.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.238.231.42 - - [08/Jun/2026:14:27:34 +0200] "GET /wp-includes/blocks/media-text/ HTTP/1.1" 404 4183 "http://falkensee.info/wp-includes/blocks/media-text/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.238.231.42 - - [08/Jun/2026:14:27:35 +0200] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 4183 "http://falkensee.info/wp-content/uploads/2025/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.238.231.42 - - [08/Jun/2026:14:27:35 +0200] "GET /wp-includes/Requests/src/Exception/ HTTP/1.1" 404 4183 "http://falkensee.info/wp-includes/Requests/src/ ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-08 05:35:01 (1 month ago)	Aggressive web search of vulnerable pages: /wp-login.php /wp-content/themes/twentynineteen/sass/form ... show more Aggressive web search of vulnerable pages: /wp-login.php /wp-content/themes/twentynineteen/sass/forms/ /wp-includes/Text/Diff/Engine/template-s ... show less	Web App Attack
🇫🇮 YF	2026-06-08 01:00:57 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 23:59:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.238.231.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.238.231.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:59:31.984274 2026] [security2:error] [pid 9850:tid 9850] [client 185.238.231.42:62989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fabulouswire.net"] [uri "/wp-includes/wp-config.php"] [unique_id "aiYF4zryZih2dOvv7ZQXowAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 23:11:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.238.231.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.238.231.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:11:26.154277 2026] [security2:error] [pid 13109:tid 13109] [client 185.238.231.42:20717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fallweddingnapkins.com"] [uri "/wp-content/wp-config.php"] [unique_id "aiX6npH_QOqB5Y8YdxXcDgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-07 22:15:09 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇳🇱 Site.eu	2026-06-07 19:00:15 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 Progetto1	2026-06-06 16:20:24 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 Baking333	2026-06-05 09:10:19 (1 month ago)	[redacted] 185.238.231.42 - - [05/Jun/2026:10:10:14 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/399 ... show more [redacted] 185.238.231.42 - - [05/Jun/2026:10:10:14 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/399835 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" [redacted] 185.238.231.42 - - [05/Jun/2026:10:10:16 +0100] "GET /wp-admin/ HTTP/1.1" 301 606 0/301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-06-04 05:47:23 (1 month ago)	(y4) Failed scan -byebye- from 185.238.231.42 (US/United States/-): (CF_ENABLE)	Hacking
🇬🇧 consul.to	2026-06-03 07:59:11 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-06-02 12:44:32 (1 month ago)	AutoBlockWindow-Known bad useragent query-2026-06-02 12:44:31	Bad Web Bot
🇨🇭 backslash	2026-06-01 02:06:04 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 329 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.90.142.114

🇺🇸 162.216.149.247

🇳🇱 160.119.71.135

🇺🇸 135.237.127.54

🇧🇷 104.22.10.177

🇷🇴 80.94.92.175

🇺🇸 192.178.115.80

🇬🇧 185.247.137.243

🇩🇪 185.242.3.195

🇰🇷 168.107.36.135

🇩🇪 167.94.146.45

🇫🇮 147.185.133.139

🇹🇷 95.3.77.254

🇹🇷 94.154.43.185

🇧🇷 45.205.1.244

🇯🇵 43.165.177.143

🇦🇺 144.48.38.102

🇮🇳 128.185.201.26

🇨🇳 120.48.90.166

🇷🇴 92.118.39.49