This IP address has been reported a total of
11
times from
10 distinct
sources.
200.143.166.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-28T12:30:16.077482+00:00 sg-jumphost-server sshd[1420923]: Connection closed by authenticati ...
show more2026-08-28T12:30:16.077482+00:00 sg-jumphost-server sshd[1420923]: Connection closed by authenticating user root 200.143.166.42 port 44950 [preauth]
2026-08-28T12:32:18.969318+00:00 sg-jumphost-server sshd[1421177]: Connection closed by authenticating user root 200.143.166.42 port 37914 [preauth]
...
show less
2026-08-28T12:18:34.225741shield sshd\[23318\]: Invalid user ubuntu from 200.143.166.42 port 15195
2 ...
show more2026-08-28T12:18:34.225741shield sshd\[23318\]: Invalid user ubuntu from 200.143.166.42 port 15195
2026-08-28T12:18:34.363025shield sshd\[23318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.143.166.42
2026-08-28T12:18:35.693599shield sshd\[23318\]: Failed password for invalid user ubuntu from 200.143.166.42 port 15195 ssh2
2026-08-28T12:25:57.085069shield sshd\[26486\]: Invalid user ubuntu from 200.143.166.42 port 45998
2026-08-28T12:25:57.221308shield sshd\[26486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.143.166.42
show less
Brute-Force
SSH
Anonymous
Aug 28 07:11:17 wp sshd[3151749]: Failed password for invalid user ubuntu from 200.143.166.42 port 6 ...
show moreAug 28 07:11:17 wp sshd[3151749]: Failed password for invalid user ubuntu from 200.143.166.42 port 64975 ssh2
Aug 28 07:14:48 wp sshd[3152643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.143.166.42 user=root
Aug 28 07:14:51 wp sshd[3152643]: Failed password for root from 200.143.166.42 port 48415 ssh2
...
show less
2026-08-28T12:00:19.381230+00:00 sg-jumphost-server sshd[1417192]: Connection closed by authenticati ...
show more2026-08-28T12:00:19.381230+00:00 sg-jumphost-server sshd[1417192]: Connection closed by authenticating user root 200.143.166.42 port 33196 [preauth]
2026-08-28T12:07:54.975541+00:00 sg-jumphost-server sshd[1418138]: Connection closed by authenticating user root 200.143.166.42 port 62850 [preauth]
2026-08-28T12:13:21.402538+00:00 sg-jumphost-server sshd[1418892]: Invalid user ubuntu from 200.143.166.42 port 42443
...
show less
Aug 28 10:19:45 mx sshd[1145765]: Failed password for root from 200.143.166.42 port 32972 ssh2
Aug 2 ...
show moreAug 28 10:19:45 mx sshd[1145765]: Failed password for root from 200.143.166.42 port 32972 ssh2
Aug 28 11:40:36 mx sshd[1149494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.143.166.42 user=root
Aug 28 11:40:38 mx sshd[1149494]: Failed password for root from 200.143.166.42 port 59535 ssh2
...
show less
2026-08-28T04:46:06.026725-04:00 site sshd-session[114930]: User root from 200.143.166.42 not allowe ...
show more2026-08-28T04:46:06.026725-04:00 site sshd-session[114930]: User root from 200.143.166.42 not allowed because not listed in AllowUsers
2026-08-28T06:00:34.104129-04:00 site sshd-session[116661]: User root from 200.143.166.42 not allowed because not listed in AllowUsers
2026-08-28T07:20:18.231429-04:00 site sshd-session[120916]: User root from 200.143.166.42 not allowed because not listed in AllowUsers
...
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T09:23Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T09:23Z). Usernames tried: root.
show less