This IP address has been reported a total of
279
times from
171 distinct
sources.
213.142.153.152 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Moldova (the Republic of)
with 65
reports;
United States of America
with 40
reports;
Germany
with 38
reports.
The most common categories in these recent reports were:
Brute-Force
154
times;
SSH
123
times;
Web App Attack
105
times;
Hacking
52
times;
Port Scan
37
times;
Other
46
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-14T17:06:02.985794+00:00 md sshd-session[4040879]: Failed password for root from 213.142.153 ...
show more2026-10-14T17:06:02.985794+00:00 md sshd-session[4040879]: Failed password for root from 213.142.153.152 port 39044 ssh2
2026-10-14T17:08:38.715815+00:00 md sshd-session[4040889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152 user=root
2026-10-14T17:08:40.832136+00:00 md sshd-session[4040889]: Failed password for root from 213.142.153.152 port 52450 ssh2
2026-10-14T17:11:19.555417+00:00 md sshd-session[4040906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152 user=root
2026-10-14T17:11:21.802514+00:00 md sshd-session[4040906]: Failed password for root from 213.142.153.152 port 34734 ssh2
...
show less
Brute-Force
SSH
Anonymous
Port scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 100% (276 Meldungen, ...
show morePort scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 100% (276 Meldungen, US)
show less
2026-10-14T16:39:35.333468+00:00 md sshd-session[4040676]: Failed password for root from 213.142.153 ...
show more2026-10-14T16:39:35.333468+00:00 md sshd-session[4040676]: Failed password for root from 213.142.153.152 port 54760 ssh2
2026-10-14T16:42:09.591399+00:00 md sshd-session[4040696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152 user=root
2026-10-14T16:42:12.033248+00:00 md sshd-session[4040696]: Failed password for root from 213.142.153.152 port 57998 ssh2
2026-10-14T16:44:49.483109+00:00 md sshd-session[4040704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152 user=root
2026-10-14T16:44:51.227201+00:00 md sshd-session[4040704]: Failed password for root from 213.142.153.152 port 40594 ssh2
...
show less
Brute-Force
SSH
Anonymous
Web scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, ph ...
show moreWeb scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, phpunit, cgi-bin). Reported by fail2ban.
show less
213.142.153.152 - - [14/Oct/2026:16:18:14 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+ ...
show more213.142.153.152 - - [14/Oct/2026:16:18:14 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 146 "-" "libredtail-http"
...
show less
Hacking
Anonymous
Oct 14 18:08:37 mail2 Nextcloud[117379]: {"reqId":"as-pBcnwi2EdELivmFo5TwAAAQc","level":1,"time":"20 ...
show moreOct 14 18:08:37 mail2 Nextcloud[117379]: {"reqId":"as-pBcnwi2EdELivmFo5TwAAAQc","level":1,"time":"2026-10-14T16:08:37+00:00","remoteAddr":"213.142.153.152","user":"--","app":"core","method":"POST","url":"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","scriptName":"/index.php","message":"Trusted domain error. \"213.142.153.152\" tried to access using \"178.254.3.7:443\" as host.","userAgent":"libredtail-http","version":"32.0.9.2","data":{"app":"core"}}
Oct 14 18:08:38 mail2 Nextcloud[118252]: {"reqId":"as-pBr2eqvDzrXjKM3GueAAAAEc","level":1,"time":"2026-10-14T16:08:38+00:00","remoteAddr":"213.142.153.152","user":"--","app":"core","method":"POST","url":"/index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input","scriptName":"/index.php","message":"Trusted domain error. \"213.142.153.152\" tried to access using \"178.254.3.7:443\" as host.","userAgent":"libredtail-http","version":"32.0.9.2","data":{"app":"core"}}
Oct 14 18:08:40 mail2 Nextcloud[607
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 213.142.153.152 (US/United States/r ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 213.142.153.152 (US/United States/rezrokezrp.com): 1 in the last 3600 secs
show less
2026-10-14T14:33:15.981139+02:00 git-lab-runner02 sshd-session[1647163]: Invalid user user from 213. ...
show more2026-10-14T14:33:15.981139+02:00 git-lab-runner02 sshd-session[1647163]: Invalid user user from 213.142.153.152 port 40138
2026-10-14T14:33:15.984236+02:00 git-lab-runner02 sshd-session[1647163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152
2026-10-14T14:33:17.967492+02:00 git-lab-runner02 sshd-session[1647163]: Failed password for invalid user user from 213.142.153.152 port 40138 ssh2
2026-10-14T14:34:57.936577+02:00 git-lab-runner02 sshd-session[1647696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.142.153.152 user=root
2026-10-14T14:34:59.794188+02:00 git-lab-runner02 sshd-session[1647696]: Failed password for root from 213.142.153.152 port 55348 ssh2
...
show less
