152.42.129.75

crowdsecurity/http-bf-wordpress_bf

[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: radius.astropot.site | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]

Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1771064011

list.rtbh.com.tr report: tcp/0

Unwanted traffic detected by honeypot on February 14, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (242 over ssh).

ThreatBook Intelligence: Edu,Scanner more details on https://threatbook.io/ip/152.42.129.75

Feb 14 13:38:41 ca-bhs-01 sshd[3395519]: Invalid user operator from 152.42.129.75 port 60158 ...

2026-02-14T12:31:50.244860+00:00 hostname sshd[1528046]: Failed password for nginx from 152.42.129.75 port 34046 ssh2 2026-02-14T12:32:29.235975+00:00 hostname sshd[1528050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more 2026-02-14T12:31:50.244860+00:00 hostname sshd[1528046]: Failed password for nginx from 152.42.129.75 port 34046 ssh2 2026-02-14T12:32:29.235975+00:00 hostname sshd[1528050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 user=nginx 2026-02-14T12:32:31.568498+00:00 hostname sshd[1528050]: Failed password for nginx from 152.42.129.75 port 36784 ssh2 2026-02-14T12:33:10.151643+00:00 hostname sshd[1528052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 user=nginx 2026-02-14T12:33:12.780348+00:00 hostname sshd[1528052]: Failed password for nginx from 152.42.129.75 port 40912 ssh2 ... show less

Feb 14 12:29:25 localhost sshd[221673]: Failed password for invalid user nginx from 152.42.129.75 port 47264 ssh2 Feb 14 12:30:05 localhost sshd[221679]: Invalid user nginx from 152.42.129.75 port 36866 Feb 14 12:30:05 localhost sshd[221679]: pam_uni ... show more Feb 14 12:29:25 localhost sshd[221673]: Failed password for invalid user nginx from 152.42.129.75 port 47264 ssh2 Feb 14 12:30:05 localhost sshd[221679]: Invalid user nginx from 152.42.129.75 port 36866 Feb 14 12:30:05 localhost sshd[221679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 Feb 14 12:30:07 localhost sshd[221679]: Failed password for invalid user nginx from 152.42.129.75 port 36866 ssh2 Feb 14 12:30:46 localhost sshd[221686]: Invalid user nginx from 152.42.129.75 port 39126 ... show less

Feb 14 13:23:11 ca-bhs-01 sshd[3392504]: Invalid user apache from 152.42.129.75 port 41486 ...

2026-02-14T20:09:38.547541+08:00 CVM24121 sshd[3736963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 2026-02-14T20:09:40.333025+08:00 CVM24121 sshd[3736963]: Failed password for invalid user d ... show more 2026-02-14T20:09:38.547541+08:00 CVM24121 sshd[3736963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 2026-02-14T20:09:40.333025+08:00 CVM24121 sshd[3736963]: Failed password for invalid user docker from 152.42.129.75 port 55698 ssh2 2026-02-14T20:10:20.715720+08:00 CVM24121 sshd[3737059]: Invalid user docker from 152.42.129.75 port 44910 ... show less

2026-02-14T12:07:48.959027+00:00 hostname sshd[1527716]: Failed password for invalid user docker from 152.42.129.75 port 37974 ssh2 2026-02-14T12:08:27.945509+00:00 hostname sshd[1527720]: Invalid user docker from 152.42.129.75 port 32864 2026-02-14T ... show more 2026-02-14T12:07:48.959027+00:00 hostname sshd[1527716]: Failed password for invalid user docker from 152.42.129.75 port 37974 ssh2 2026-02-14T12:08:27.945509+00:00 hostname sshd[1527720]: Invalid user docker from 152.42.129.75 port 32864 2026-02-14T12:08:28.062490+00:00 hostname sshd[1527720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 2026-02-14T12:08:30.239325+00:00 hostname sshd[1527720]: Failed password for invalid user docker from 152.42.129.75 port 32864 ssh2 2026-02-14T12:09:08.943320+00:00 hostname sshd[1527773]: Invalid user docker from 152.42.129.75 port 49702 ... show less

Feb 14 12:06:49 localhost sshd[220474]: Failed password for invalid user docker from 152.42.129.75 port 39060 ssh2 Feb 14 12:07:27 localhost sshd[220481]: Invalid user docker from 152.42.129.75 port 57072 Feb 14 12:07:27 localhost sshd[220481]: pam_u ... show more Feb 14 12:06:49 localhost sshd[220474]: Failed password for invalid user docker from 152.42.129.75 port 39060 ssh2 Feb 14 12:07:27 localhost sshd[220481]: Invalid user docker from 152.42.129.75 port 57072 Feb 14 12:07:27 localhost sshd[220481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.129.75 Feb 14 12:07:29 localhost sshd[220481]: Failed password for invalid user docker from 152.42.129.75 port 57072 ssh2 Feb 14 12:08:08 localhost sshd[220489]: Invalid user docker from 152.42.129.75 port 34972 ... show less

Feb 14 12:58:46 ca-bhs-01 sshd[3387511]: Invalid user svn from 152.42.129.75 port 37002 ...