This IP address has been reported a total of
13
times from
9 distinct
sources.
142.93.97.192 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Switzerland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatOct2417:09:34.4851912026][security2:error][pid3438000:tid3438114][client142.93.97.192:0]ModSecur ...
show more[SatOct2417:09:34.4851912026][security2:error][pid3438000:tid3438114][client142.93.97.192:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"reddragonrecords.ch\"][uri\"/\"][unique_id\"atzKLh0Vcghv0rlO-_-RBQAAAQo\"]
show less
Honeypot hit: HTTP/1.1 request on 6931
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ...
show moreHoneypot hit: HTTP/1.1 request on 6931
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 6931 [2] TCP
show less
05/07/2026-10:49:04.837561 src=142.93.97.192 dst=89.144.63.27:3306 proto=6 msg=ET SCAN Suspicious in ...
show more05/07/2026-10:49:04.837561 src=142.93.97.192 dst=89.144.63.27:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306
show less
