JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.4.142.6

185.4.142.6 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 28%: ?

28%

ISP	PLANETEL-SPA
Usage Type	Fixed Line ISP
ASN	AS47217
Hostname(s)	pl01.planetel.it
Domain Name	planetel.it
Country	🇮🇹 Italy
City	Dalmine, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.4.142.6

Whois 185.4.142.6

IP Abuse Reports for 185.4.142.6:

This IP address has been reported a total of 11 times from 8 distinct sources. 185.4.142.6 was first reported on May 21st 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-09 07:32:40 (3 weeks ago)	185.4.142.6 - - [09/Jun/2026:09:32:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; In ... show more 185.4.142.6 - - [09/Jun/2026:09:32:40 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 15:00:46 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:00:41.242407 2026] [security2:error] [pid 22270:tid 22270] [client 185.4.142.6:53660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artspacecleveland.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artspacecleveland.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiWHmTxoM4rOtxBzfxyXUQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-06-07 14:45:26 (3 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 08:28:21 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 04:28:14.126793 2026] [security2:error] [pid 24775:tid 24775] [client 185.4.142.6:39848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barkatthemoonpetsitting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barkatthemoonpetsitting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiUrnlJgryLsavqq1FDpzgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 14:58:25 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 10:58:21.231555 2026] [security2:error] [pid 19186:tid 19186] [client 185.4.142.6:55952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ciptaconindotara.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiQ1jbtwgNwOa09HGVZCLAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 21:18:55 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 185.4.142.6 (pl01.planetel.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 17:18:48.988400 2026] [security2:error] [pid 31826:tid 31826] [client 185.4.142.6:49068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|votmuli.com.greenlight.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "votmuli.com.greenlight.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiCaOBr216hOE4vkC90RkgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-02 05:13:51 (1 month ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 185.4.142.6 (IT/Italy/pl01.planetel.it): 1 in ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 185.4.142.6 (IT/Italy/pl01.planetel.it): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Hazzard	2026-05-26 03:08:30 (1 month ago)	(wordpress) Failed wordpress login from 185.4.142.6 (IT/Italy/Province of Milan/Legnano/pl01.planete ... show more (wordpress) Failed wordpress login from 185.4.142.6 (IT/Italy/Province of Milan/Legnano/pl01.planetel.it/[redacted]): (CF_ENABLE) show less	Brute-Force
🇮🇹 VHosting	2026-05-22 04:21:26 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 tecnicorioja	2026-05-21 22:00:27 (1 month ago)	wp-login attack [21/May/2026:20:53:08	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-21 08:20:13 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 185.246.130.20

🇺🇸 172.253.217.17

🇯🇵 118.194.228.101

🇹🇷 94.154.43.230

🇷🇺 79.104.0.82

🇷🇺 77.91.108.250

🇺🇸 64.62.197.66

🇺🇸 50.6.228.32

🇬🇭 41.155.88.155

🇨🇳 36.35.166.117

🇫🇷 5.135.167.5

🇺🇸 2604:a880:400:d1:0:4:6c7e:6001

🇺🇸 205.210.31.91

🇧🇷 181.218.9.86

🇧🇷 172.217.35.16

🇭🇰 156.251.179.157

🇨🇳 123.232.132.162

🇺🇸 100.29.63.24

🇳🇱 94.102.56.99

🇰🇿 89.218.247.234