This IP address has been reported a total of
9
times from
7 distinct
sources.
142.93.158.152 was first reported on
October 15th 2026 , and the most recent report was
3 days ago Germany
with 4
reports;
Italy
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Port Scan
3
times;
Brute-Force
1
time;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
Jason Howell
2026-10-15 05:17:18
(3 days ago)
142.93.158.152 - - [15/Oct/2026:00:01:25 -0500] "GET /wp-login.php HTTP/1.1" 301 589 "-" "Mozilla/5. ...
show more
142.93.158.152 - - [15/Oct/2026:00:01:25 -0500] "GET /wp-login.php HTTP/1.1" 301 589 "-" "Mozilla/5.0"
142.93.158.152 - - [15/Oct/2026:00:01:27 -0500] "GET /wp-login.php HTTP/1.1" 200 5520 "-" "Mozilla/5.0"
142.93.158.152 - - [15/Oct/2026:00:17:11 -0500] "POST /wp-login.php HTTP/1.1" 200 8392 "-" "Mozilla/5.0"
142.93.158.152 - - [15/Oct/2026:00:17:12 -0500] "POST /wp-login.php HTTP/1.1" 200 8379 "-" "Mozilla/5.0"
142.93.158.152 - - [15/Oct/2026:00:17:17 -0500] "POST /wp-login.php HTTP/1.1" 200 4755 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇩🇪
maxpower
2026-10-15 03:34:08
(3 days ago)
(wp_login) REGOLA 1 - WP Login Attack 142.93.158.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(wp_login) REGOLA 1 - WP Login Attack 142.93.158.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 142.93.158.152 - - [15/Oct/2026:05:28:20 +0200] "POST /wp-login.php HTTP/2.0" 200 4805 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:05:29:43 +0200] "POST /wp-login.php HTTP/2.0" 200 4813 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:05:31:10 +0200] "POST /wp-login.php HTTP/2.0" 200 4808 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:05:32:38 +0200] "POST /wp-login.php HTTP/2.0" 200 4815 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:05:34:03 +0200] "POST /wp-login.php HTTP/2.0" 200 4810 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
show less
Port Scan
🇳🇱
ConsulHosting
2026-10-15 03:13:27
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
maxpower
2026-10-15 03:12:50
(3 days ago)
(PERMBLOCK) 142.93.158.152 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs; Por ...
show more
(PERMBLOCK) 142.93.158.152 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
2026-10-15 03:07:03
(3 days ago)
Automated web scanner. Requested suspicious paths: /wp-login.php. UTC: 2026-10-15 02:31:11.
Web App Attack
🇩🇪
maxpower
2026-10-15 02:52:03
(3 days ago)
(wp_login) REGOLA 1 - WP Login Attack 142.93.158.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(wp_login) REGOLA 1 - WP Login Attack 142.93.158.152 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 142.93.158.152 - - [15/Oct/2026:04:24:26 +0200] "GET /wp-login.php HTTP/2.0" 200 8451 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:04:24:27 +0200] "GET /?author=1 HTTP/2.0" 403 146 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:04:34:47 +0200] "GET /wp-login.php HTTP/2.0" 404 201 "-" "Mozilla/5.0" "142.93.158.152" host=brokerleader.it
142.93.158.152 - - [15/Oct/2026:04:51:09 +0200] "POST /wp-login.php HTTP/2.0" 200 8593 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
142.93.158.152 - - [15/Oct/2026:04:51:59 +0200] "POST /wp-login.php HTTP/2.0" 200 8593 "-" "Mozilla/5.0" "142.93.158.152" host=ipv6.digiampaolosrl.it
show less
Port Scan
🇳🇴
Abuse Buster
2026-10-15 02:41:11
(3 days ago)
142.93.158.152 - - [15/Oct/2026:04:41:00 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5. ...
show more
142.93.158.152 - - [15/Oct/2026:04:41:00 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
142.93.158.152 - - [15/Oct/2026:04:41:09 +0200] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇵🇱
Budyn
2026-10-15 02:30:23
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.sweetpuddingtrap.xyz | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-15 02:30:04
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
