This IP address has been reported a total of
406
times from
67 distinct
sources.
143.20.185.242 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/143.20.185.242
2026 ...
show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/143.20.185.242
2026-03-02 19:22:06 ["uname -a"]
2026-03-02 19:21:24 ["uname -a"]
show less
2026-03-02T19:14:37.386687+08:00 rosemary sshd[1067349]: Connection closed by authenticating user ro ...
show more2026-03-02T19:14:37.386687+08:00 rosemary sshd[1067349]: Connection closed by authenticating user root 143.20.185.242 port 35862 [preauth]
2026-03-02T19:14:37.460441+08:00 rosemary sshd[1067351]: Connection closed by authenticating user root 143.20.185.242 port 51670 [preauth]
...
show less
2026-02-27T23:19:03.433743+08:00 rosemary sshd[2786186]: Connection closed by authenticating user ro ...
show more2026-02-27T23:19:03.433743+08:00 rosemary sshd[2786186]: Connection closed by authenticating user root 143.20.185.242 port 49864 [preauth]
2026-02-27T23:19:03.757444+08:00 rosemary sshd[2786184]: Connection closed by authenticating user root 143.20.185.242 port 45476 [preauth]
...
show less
2026-02-26T15:09:35.117231+08:00 rosemary sshd[1382766]: Invalid user dasusr1 from 143.20.185.242 po ...
show more2026-02-26T15:09:35.117231+08:00 rosemary sshd[1382766]: Invalid user dasusr1 from 143.20.185.242 port 57656
2026-02-26T15:09:35.157536+08:00 rosemary sshd[1382769]: Invalid user dasusr1 from 143.20.185.242 port 54960
...
show less
2026-02-25T23:07:41.559597+08:00 rosemary sshd[692173]: Invalid user ldq from 143.20.185.242 port 50 ...
show more2026-02-25T23:07:41.559597+08:00 rosemary sshd[692173]: Invalid user ldq from 143.20.185.242 port 50906
2026-02-25T23:07:41.827895+08:00 rosemary sshd[692173]: Connection closed by invalid user ldq 143.20.185.242 port 50906 [preauth]
...
show less
2026-02-25T14:57:21.122592+08:00 rosemary sshd[339471]: Connection closed by authenticating user roo ...
show more2026-02-25T14:57:21.122592+08:00 rosemary sshd[339471]: Connection closed by authenticating user root 143.20.185.242 port 50028 [preauth]
...
show less
2026-02-25T06:40:21.782088+08:00 rosemary sshd[4179328]: Connection closed by authenticating user ro ...
show more2026-02-25T06:40:21.782088+08:00 rosemary sshd[4179328]: Connection closed by authenticating user root 143.20.185.242 port 53412 [preauth]
2026-02-25T06:40:22.149672+08:00 rosemary sshd[4179335]: Connection closed by authenticating user root 143.20.185.242 port 49000 [preauth]
2026-02-25T06:40:22.157764+08:00 rosemary sshd[4179331]: Connection closed by authenticating user root 143.20.185.242 port 44060 [preauth]
...
show less
2026-02-25T04:34:12.256322+08:00 rosemary sshd[4090468]: Connection closed by authenticating user ro ...
show more2026-02-25T04:34:12.256322+08:00 rosemary sshd[4090468]: Connection closed by authenticating user root 143.20.185.242 port 53876 [preauth]
2026-02-25T04:34:12.980636+08:00 rosemary sshd[4090470]: Connection closed by authenticating user root 143.20.185.242 port 43968 [preauth]
...
show less
Brute-Force
SSH
Showing 391 to
405
of 406 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩