AbuseIPDB » 192.42.116.215

192.42.116.215 was found in our database!

This IP was reported 3,792 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Nothing to hide
Usage Type	University/College/School
ASN	AS1101
Hostname(s)	18.tor-exit.nothingtohide.nl
Domain Name	nothingtohide.nl
Country	Netherlands
City	Nieuwegein, Utrecht

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 192.42.116.215

Whois 192.42.116.215

IP Abuse Reports for 192.42.116.215:

This IP address has been reported a total of 3,792 times from 607 distinct sources. 192.42.116.215 was first reported on December 19th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MSZ	2025-06-16 22:00:07 (4 days ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
mkaraki	2025-06-16 20:10:20 (4 days ago)	1750104618 # Service_probe # SIGNATURE_SEND # source_ip:192.42.116.215 # dst_port:7443 ...	Port Scan
security.rdmc.fr	2025-06-16 18:37:25 (4 days ago)	IP in Malicious Database	Web App Attack
Site.eu	2025-06-16 16:41:45 (4 days ago)	Excessive multi-domain requests	Brute-Force
Study Bitcoin 🤗	2025-06-16 16:36:20 (4 days ago)	3 port probes: 3x tcp/8333 [ros]	Port Scan
Deveroonie	2025-06-16 14:28:43 (4 days ago)	2025-06-16T14:28:39.066689+00:00 web sshd[2330716]: Failed password for root from 192.42.116.215 por ... show more2025-06-16T14:28:39.066689+00:00 web sshd[2330716]: Failed password for root from 192.42.116.215 port 33857 ssh2 2025-06-16T14:28:43.041289+00:00 web sshd[2330716]: Connection closed by authenticating user root 192.42.116.215 port 33857 [preauth] ... show less	Hacking Brute-Force SSH
SimonB	2025-06-16 12:23:43 (4 days ago)	SSH bruteforce attempt	Brute-Force SSH
smick	2025-06-16 11:02:34 (4 days ago)	RDP Brute-force.	Brute-Force
sdos.es	2025-06-16 11:00:07 (4 days ago)	"Restricted File Access Attempt - Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store ... show more"Restricted File Access Attempt - Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store" show less	Web App Attack
MAGIC	2025-06-16 10:08:51 (4 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2025-06-16 08:11:46 (4 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Pingger Shikkoken	2025-06-16 06:12:06 (5 days ago)	2025-06-16T06:12:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-06-16T06:12:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=192.42.116.215 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56166 PROTO=TCP SPT=23942 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 2025-06-16T06:12:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=192.42.116.215 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=49068 PROTO=TCP SPT=24205 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 2025-06-16T06:12:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=192.42.116.215 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62166 PROTO=TCP SPT=24902 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
SiteXL	2025-06-16 03:06:01 (5 days ago)	{"event":{"DateTime":"2025-06-16T03:04:10Z","RemoteAddr":"192.42.116.215:56067","Protocol":"SSH","Co ... show more{"event":{"DateTime":"2025-06-16T03:04:10Z","RemoteAddr":"192.42.116.215:56067","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"2a97c90c-f113-487b-b3f8-771344951950","Environ":"","User":"root","Password":"root","Client":"SSH-2.0-OpenSSH_9.9","Headers":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"192.42.116.215","SourcePort":"56067","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2025-06-16T03:04:11Z","RemoteAddr":"192.42.116.215:56067","Protocol":"SSH","Command":"LC_ALL=C top -bn1","CommandOutput":"top - 17:24:05 up 25 days, 3:42, 1 user, load average: 0.00, 0.01, 0.05\nTasks: 102 total, 1 running, 101 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 0.3 us, 0.1 sy, 0.0 ni, 99.4 id, 0.1 wa, 0.0 hi, 0.1 si, 0.0 st\nKiB Mem : 8163408 total, 1847328 free, 2436500 used, 3880080 buff/cache\nK show less	Port Scan Hacking Brute-Force SSH
AvonleaConsulting	2025-06-15 22:48:58 (5 days ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
mikrotik.al	2025-06-15 22:01:19 (5 days ago)	06/15/2025-22:01:19.307388 192.42.116.215 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 58	Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩