This IP address has been reported a total of
300
times from
154 distinct
sources.
192.42.116.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:27:18Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:27:18Z and 2026-06-11T20:27:19Z
show less
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/headlights-projectors/mini-headlig ...
show moreRequests denied due to proxy/VPN risk (tenant=82 method=GET path=/headlights-projectors/mini-headlights.html ua='Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1')
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: d3azdm1q0gvo54.cloudfront.net:80
show less
Failed login attempt root/root via OpenSSH 9.9. Session gained access, executed recon: uname, getpro ...
show moreFailed login attempt root/root via OpenSSH 9.9. Session gained access, executed recon: uname, getprop, echo for system enumeration. Dropped executable 'apcid' to /var/tmp/apcid, /bin/apcid, /sbin/apcid, /usr/bin/apcid via cat redirection, chmod +x, exec /var/tmp/apcid. Ran killall -9 .f targeting process termination. LC_ALL=C prefix on all cmds to bypass locale. Attack pattern: weak default creds, OS enum, multi-path malware placement for persistence, process cleanup. No secondary payloads/lateral movement observed. Apcid botnet variant targeting IoT/embedded devices. Brute-force on weak creds.
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 58). Ip 192.42.116.66 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-10 11:03:38.994729025 +0000 UTC
show less
Hacking
Web App Attack
Showing 1 to
15
of 300 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
