AbuseIPDB » 192.42.116.191

192.42.116.191 was found in our database!

This IP was reported 2,747 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Nothing to hide
Usage Type	University/College/School
ASN	AS1101
Hostname(s)	1.tor-exit.nothingtohide.nl
Domain Name	nothingtohide.nl
Country	Netherlands
City	Nieuwegein, Utrecht

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 192.42.116.191

Whois 192.42.116.191

IP Abuse Reports for 192.42.116.191:

This IP address has been reported a total of 2,747 times from 403 distinct sources. 192.42.116.191 was first reported on December 19th 2022, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
niceshops.com	2025-03-25 03:09:35 (6 hours ago)	Web Attack (Mar 25 04:09:34 ScriptKiddie: request for /admin )	SQL Injection Brute-Force Bad Web Bot Web App Attack
ozisp.com.au	2025-03-24 19:38:29 (13 hours ago)	NL_RIPE_<33>1742845108 [1:2522063:5835] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic gr ... show moreNL_RIPE_<33>1742845108 [1:2522063:5835] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 64 [Classification: Misc Attack] [Priority: 2] {TCP} 192.42.116.191:62622 show less	Open Proxy
Mendip_Defender	2025-03-24 16:42:12 (16 hours ago)	192.42.116.191 - - [24/Mar/2025:16:42:05 +0000] "GET /amenities/ashwick-church-rooms HTTP/1.0" 301 8 ... show more192.42.116.191 - - [24/Mar/2025:16:42:05 +0000] "GET /amenities/ashwick-church-rooms HTTP/1.0" 301 850 "https://www.ashwickparish.org/amenities/ashwick-church-rooms" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20100101 Firefox/14.0.1" 192.42.116.191 - - [24/Mar/2025:16:42:07 +0000] "GET /amenities/ashwick-oakhill-village-hall/booking-information HTTP/1.0" 301 878 "https://www.ashwickparish.org/amenities/ashwick-oakhill-village-hall/booking-information" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20100101 Firefox/14.0.1" ... show less	Hacking Web App Attack
Thaliruth	2025-03-24 14:17:46 (19 hours ago)	192.42.116.191 - - [24/Mar/2025:15:17:46 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-cli ... show more192.42.116.191 - - [24/Mar/2025:15:17:46 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-client/1.1" ... show less	Bad Web Bot
ipblock.com	2025-03-24 08:46:00 (1 day ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
ipblock.com	2025-03-24 04:15:00 (1 day ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
Anonymous	2025-03-24 03:54:34 (1 day ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
ipblock.com	2025-03-23 18:58:00 (1 day ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
ipblock.com	2025-03-23 16:10:00 (1 day ago)	IPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
niceshops.com	2025-03-23 12:49:16 (1 day ago)	Web Attack (Mar 25 13:49:15 ScriptKiddie: request for /wp-admin/ )	SQL Injection Brute-Force Bad Web Bot Web App Attack
aranguren.org	2025-03-23 12:02:46 (1 day ago)	[Sun Mar 23 22:15:35.270962 2025] [ssl:error] [pid 3554603:tid 3554635] [client 192.42.116.191:34195 ... show more[Sun Mar 23 22:15:35.270962 2025] [ssl:error] [pid 3554603:tid 3554635] [client 192.42.116.191:34195] AH02031: Hostname stikked.aranguren.org provided via SNI, but no hostname provided in HTTP request [Sun Mar 23 23:01:18.312494 2025] [ssl:error] [pid 3549164:tid 3549219] [client 192.42.116.191:63628] AH02031: Hostname private.aranguren.org provided via SNI, but no hostname provided in HTTP request [Sun Mar 23 23:02:45.349081 2025] [ssl:error] [pid 3554603:tid 3554642] [client 192.42.116.191:58702] AH02031: Hostname ha.aranguren.org provided via SNI, but no hostname provided in HTTP request ... show less	Brute-Force Web App Attack
ipblock.com	2025-03-23 08:28:00 (2 days ago)	IPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
aranguren.org	2025-03-23 03:10:04 (2 days ago)	[Sun Mar 23 14:00:30.481759 2025] [ssl:error] [pid 3331142:tid 3331200] [client 192.42.116.191:44289 ... show more[Sun Mar 23 14:00:30.481759 2025] [ssl:error] [pid 3331142:tid 3331200] [client 192.42.116.191:44289] AH02031: Hostname plex.aranguren.org provided via SNI, but no hostname provided in HTTP request [Sun Mar 23 14:00:33.674853 2025] [ssl:error] [pid 3339105:tid 3339145] [client 192.42.116.191:16087] AH02031: Hostname stikked.aranguren.org provided via SNI, but no hostname provided in HTTP request [Sun Mar 23 14:10:03.826253 2025] [ssl:error] [pid 3331142:tid 3331193] [client 192.42.116.191:65148] AH02031: Hostname aranguren.org provided via SNI, but no hostname provided in HTTP request ... show less	Brute-Force Web App Attack
hbrks	2025-03-22 18:05:24 (2 days ago)	GET http://marche-be.com/administrator/	Web Spam Hacking Bad Web Bot
niceshops.com	2025-03-22 16:37:55 (2 days ago)	Web Attack ([22/Mar/2025:17:37:19 +0100] )	Brute-Force Bad Web Bot Web App Attack