This IP address has been reported a total of
178
times from
107 distinct
sources.
187.142.248.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-07T11:29:14.061775+00:00 hel.updn.io sshd[1471782]: Failed password for root from 187.142.24 ...
show more2026-07-07T11:29:14.061775+00:00 hel.updn.io sshd[1471782]: Failed password for root from 187.142.248.20 port 39398 ssh2
2026-07-07T11:32:11.281090+00:00 hel.updn.io sshd[1486595]: Invalid user zhangrd from 187.142.248.20 port 60722
2026-07-07T11:32:11.288216+00:00 hel.updn.io sshd[1486595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
2026-07-07T11:32:13.371077+00:00 hel.updn.io sshd[1486595]: Failed password for invalid user zhangrd from 187.142.248.20 port 60722 ssh2
2026-07-07T11:35:15.642125+00:00 hel.updn.io sshd[1501630]: Invalid user zabbix from 187.142.248.20 port 54170
...
show less
(sshd) Failed SSH login from 187.142.248.20 (MX/Mexico/dsl-20-248-142-187-dynamic.prod-infinitum.com ...
show more(sshd) Failed SSH login from 187.142.248.20 (MX/Mexico/dsl-20-248-142-187-dynamic.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 7 06:07:15 13966 sshd[13032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 06:07:17 13966 sshd[13032]: Failed password for root from 187.142.248.20 port 44946 ssh2
Jul 7 06:28:51 13966 sshd[24338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 06:28:53 13966 sshd[24338]: Failed password for root from 187.142.248.20 port 42366 ssh2
Jul 7 06:31:50 13966 sshd[25939]: Invalid user zhangrd from 187.142.248.20 port 35508
show less
Brute-Force
SSH
Anonymous
2026-07-07T13:28:59+02:00 lb-1 sshd[248714]: Failed password for root from 187.142.248.20 port 35652 ...
show more2026-07-07T13:28:59+02:00 lb-1 sshd[248714]: Failed password for root from 187.142.248.20 port 35652 ssh2
2026-07-07T13:31:55+02:00 lb-1 sshd[249312]: Invalid user zhangrd from 187.142.248.20 port 56986
2026-07-07T13:31:55+02:00 lb-1 sshd[249312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
2026-07-07T13:31:57+02:00 lb-1 sshd[249312]: Failed password for invalid user zhangrd from 187.142.248.20 port 56986 ssh2
...
show less
Jul 7 05:07:38 mortgagebase sshd[10810]: Failed password for invalid user oracle from 187.142.248.2 ...
show moreJul 7 05:07:38 mortgagebase sshd[10810]: Failed password for invalid user oracle from 187.142.248.20 port 56732 ssh2
Jul 7 05:07:39 mortgagebase sshd[10810]: Disconnected from invalid user oracle 187.142.248.20 port 56732 [preauth]
Jul 7 05:10:22 mortgagebase sshd[10878]: Invalid user db2fenc1 from 187.142.248.20 port 47640
Jul 7 05:10:22 mortgagebase sshd[10878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
Jul 7 05:10:24 mortgagebase sshd[10878]: Failed password for invalid user db2fenc1 from 187.142.248.20 port 47640 ssh2
...
show less
Jul 7 04:48:52 mortgagebase sshd[10599]: Disconnected from authenticating user postgres 187.142.248 ...
show moreJul 7 04:48:52 mortgagebase sshd[10599]: Disconnected from authenticating user postgres 187.142.248.20 port 60244 [preauth]
Jul 7 04:51:56 mortgagebase sshd[10632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 04:51:58 mortgagebase sshd[10632]: Failed password for root from 187.142.248.20 port 45792 ssh2
Jul 7 04:51:58 mortgagebase sshd[10632]: Disconnected from authenticating user root 187.142.248.20 port 45792 [preauth]
Jul 7 04:55:06 mortgagebase sshd[10675]: Invalid user testuser from 187.142.248.20 port 59082
...
show less
Jul 7 10:41:39 webserver sshd[490242]: Failed password for invalid user ubuntu from 187.142.248.20 ...
show moreJul 7 10:41:39 webserver sshd[490242]: Failed password for invalid user ubuntu from 187.142.248.20 port 60684 ssh2
Jul 7 10:45:43 webserver sshd[490464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 10:45:45 webserver sshd[490464]: Failed password for root from 187.142.248.20 port 50736 ssh2
...
show less
Port Scan
Brute-Force
SSH
Anonymous
2026-07-07T12:35:31.481399 prodgateway sshd-session[46137]: pam_unix(sshd:auth): authentication fail ...
show more2026-07-07T12:35:31.481399 prodgateway sshd-session[46137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
2026-07-07T12:35:33.806188 prodgateway sshd-session[46137]: Failed password for invalid user svnadmin from 187.142.248.20 port 55740 ssh2
2026-07-07T12:39:24.842031 prodgateway sshd-session[46142]: Invalid user test from 187.142.248.20 port 44660
...
show less
2026-07-07T12:05:58.323622+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[3843365]: Invalid user test fr ...
show more2026-07-07T12:05:58.323622+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[3843365]: Invalid user test from 187.142.248.20 port 49488
2026-07-07T12:17:05.266991+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[3843468]: Invalid user admin from 187.142.248.20 port 46824
2026-07-07T12:37:14.345820+02:00 ovh-dedi-ie-ksleb25-gra sshd-session[3843714]: Invalid user steam from 187.142.248.20 port 57398
...
show less
Jul 7 04:28:38 mortgagebase sshd[10274]: Failed password for invalid user username from 187.142.248 ...
show moreJul 7 04:28:38 mortgagebase sshd[10274]: Failed password for invalid user username from 187.142.248.20 port 47592 ssh2
Jul 7 04:28:40 mortgagebase sshd[10274]: Disconnected from invalid user username 187.142.248.20 port 47592 [preauth]
Jul 7 04:32:37 mortgagebase sshd[10310]: Invalid user admin1 from 187.142.248.20 port 39278
Jul 7 04:32:37 mortgagebase sshd[10310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
Jul 7 04:32:39 mortgagebase sshd[10310]: Failed password for invalid user admin1 from 187.142.248.20 port 39278 ssh2
...
show less
Jul 7 10:21:33 webserver sshd[489014]: Failed password for root from 187.142.248.20 port 49068 ssh2 ...
show moreJul 7 10:21:33 webserver sshd[489014]: Failed password for root from 187.142.248.20 port 49068 ssh2
Jul 7 10:25:32 webserver sshd[489256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 10:25:33 webserver sshd[489256]: Failed password for root from 187.142.248.20 port 39902 ssh2
...
show less
Port Scan
Brute-Force
SSH
Anonymous
2026-07-07T12:19:35.730096 prodgateway sshd-session[46074]: pam_unix(sshd:auth): authentication fail ...
show more2026-07-07T12:19:35.730096 prodgateway sshd-session[46074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
2026-07-07T12:19:37.809708 prodgateway sshd-session[46074]: Failed password for invalid user testftp from 187.142.248.20 port 39366 ssh2
2026-07-07T12:23:37.179137 prodgateway sshd-session[46087]: Invalid user user from 187.142.248.20 port 58332
...
show less
Jul 7 04:12:11 mortgagebase sshd[10058]: Failed password for invalid user testuser from 187.142.248 ...
show moreJul 7 04:12:11 mortgagebase sshd[10058]: Failed password for invalid user testuser from 187.142.248.20 port 49512 ssh2
Jul 7 04:12:12 mortgagebase sshd[10058]: Disconnected from invalid user testuser 187.142.248.20 port 49512 [preauth]
Jul 7 04:16:19 mortgagebase sshd[10119]: Invalid user sysadmin from 187.142.248.20 port 43566
Jul 7 04:16:19 mortgagebase sshd[10119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
Jul 7 04:16:22 mortgagebase sshd[10119]: Failed password for invalid user sysadmin from 187.142.248.20 port 43566 ssh2
...
show less
Jul 7 04:10:20 phoenix sshd[598287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 7 04:10:20 phoenix sshd[598287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20 user=root
Jul 7 04:10:22 phoenix sshd[598287]: Failed password for root from 187.142.248.20 port 44614 ssh2
...
show less
SSH
Anonymous
2026-07-07T12:08:11.504012 prodgateway sshd-session[46045]: Invalid user admin from 187.142.248.20 p ...
show more2026-07-07T12:08:11.504012 prodgateway sshd-session[46045]: Invalid user admin from 187.142.248.20 port 33530
2026-07-07T12:08:11.515396 prodgateway sshd-session[46045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.142.248.20
2026-07-07T12:08:13.695098 prodgateway sshd-session[46045]: Failed password for invalid user admin from 187.142.248.20 port 33530 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 178 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩