This IP address has been reported a total of
22
times from
21 distinct
sources.
187.131.66.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH abuse or brute force attack detected by Fail2Ban
2026-07-14T14:10:26.544375+00:00 ro1-hostc-storage sshd[949433]: Invalid user pi from 187.131.66.48 ...
show more2026-07-14T14:10:26.544375+00:00 ro1-hostc-storage sshd[949433]: Invalid user pi from 187.131.66.48 port 36266
2026-07-14T14:10:26.672176+00:00 ro1-hostc-storage sshd[949431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.131.66.48
2026-07-14T14:10:28.760577+00:00 ro1-hostc-storage sshd[949431]: Failed password for invalid user pi from 187.131.66.48 port 36250 ssh2
...
show less
Honeypot brute-force via Cowrie SSH/Telnet honeypot.
Username: pi | Password: raspberry
Session: 6c8 ...
show moreHoneypot brute-force via Cowrie SSH/Telnet honeypot.
Username: pi | Password: raspberry
Session: 6c8ecf6b
show less
2026-07-14T08:48:21.420679+02:00 canterlot.jotoma.de sshd[4190933]: Invalid user pi from 187.131.66. ...
show more2026-07-14T08:48:21.420679+02:00 canterlot.jotoma.de sshd[4190933]: Invalid user pi from 187.131.66.48 port 39132
2026-07-14T08:48:21.549379+02:00 canterlot.jotoma.de sshd[4190937]: Invalid user pi from 187.131.66.48 port 39144
2026-07-14T08:48:21.610913+02:00 canterlot.jotoma.de sshd[4190933]: Connection closed by invalid user pi 187.131.66.48 port 39132 [preauth]
...
show less
Jul 13 12:52:53 b146-28 sshd[374625]: Invalid user pi from 187.131.66.48 port 48064
Jul 13 12:52:53 ...
show moreJul 13 12:52:53 b146-28 sshd[374625]: Invalid user pi from 187.131.66.48 port 48064
Jul 13 12:52:53 b146-28 sshd[374625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.131.66.48
Jul 13 12:52:56 b146-28 sshd[374625]: Failed password for invalid user pi from 187.131.66.48 port 48064 ssh2
...
show less
2026-07-13T19:05:18.845397ns2 sshd[3239292]: Invalid user pi from 187.131.66.48 port 50800
2026-07-1 ...
show more2026-07-13T19:05:18.845397ns2 sshd[3239292]: Invalid user pi from 187.131.66.48 port 50800
2026-07-13T19:05:19.058078ns2 sshd[3239292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.131.66.48
2026-07-13T19:05:20.885353ns2 sshd[3239292]: Failed password for invalid user pi from 187.131.66.48 port 50800 ssh2
...
show less
2026-07-13T17:27:40.328679+02:00 mail sshd[2721616]: Invalid user pi from 187.131.66.48 port 47502
2 ...
show more2026-07-13T17:27:40.328679+02:00 mail sshd[2721616]: Invalid user pi from 187.131.66.48 port 47502
2026-07-13T17:27:40.507493+02:00 mail sshd[2721615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.131.66.48
2026-07-13T17:27:42.215086+02:00 mail sshd[2721615]: Failed password for invalid user pi from 187.131.66.48 port 47492 ssh2
...
show less
Detected multiple authentication failures and invalid user attempts from IP address 187.131.66.48 on ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 187.131.66.48 on [PT] SP01 Node
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩