This IP address has been reported a total of
5
times from
2 distinct
sources.
188.38.42.236 was first reported on
August 6th 2026 , and the most recent report was
1 day ago United States of America
with 3
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Brute-Force
3
times;
Bad Web Bot
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-18 17:47:08
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 13:47:00.614728 2026] [security2:error] [pid 29340:tid 29364] [client 188.38.42.236:35314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chaoticperception.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chaoticperception.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atUGFHb-4BZNxrjGI0sM2QAAAFU"], referer: https://chaoticperception.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 16:58:16
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 12:58:08.791193 2026] [security2:error] [pid 9005:tid 9005] [client 188.38.42.236:49070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.robinsnestingplace.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.robinsnestingplace.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "asKFoMocupqq2p3gfhPztgAAAAg"], referer: http://www.robinsnestingplace.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-10 19:40:42
(1 month ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | 2026-09-10 19:40 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 16:25:34
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 12:25:29.344620 2026] [security2:error] [pid 12217:tid 12217] [client 188.38.42.236:33180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||meganmurph.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ap7leXtlkzZ_jDYAx6r4TQAAAIY"], referer: https://meganmurph.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-06 01:09:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.38.42.236 (host33061511.vodafone.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 21:09:36.393549 2026] [security2:error] [pid 1248308:tid 1248308] [client 188.38.42.236:45254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "anPe0IB7Su5kM---nB2U-QAAAAg"], referer: http://www.method1.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
