192.42.116.60

Recent Activity This IP has received recent abuse reports, which causes the score to increase. Tor Exit Node This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.
Abuse Confidence Score
100% Critical
1,482 reports
487 reporters · latest 1 hour ago
ISP
SURF B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215125
Domain Name
surf.nl
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
1,482 from 487 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 93 🇫🇷 France 72 🇳🇱 Netherlands 71
Most common categories Web App Attack 222 Brute-Force 168 Hacking 103 Port Scan 94 SSH 65
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 cereal57
Unsolicited connection to a honeypot (elasticpot, port 9200). Automated scan/probe.
Port Scan Web App Attack
🇩🇪 CELOS-SOC
Multiple Unauthorized VPN Login Attempts
Hacking Brute-Force
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇯🇵 ma2yeah
Bad Web Bot Web App Attack
🇺🇸 Bankbook8585
T-Pot honeypot | elasticpot honeypot
Hacking Web App Attack
🇫🇷 uthul
T-Pot honeypot: 10 hits on ports [9200] (automated)
Port Scan
🇫🇷 uthul
T-Pot honeypot: 23 hits on ports [81, 443, 8443] (automated)
Port Scan Web App Attack
🇩🇪 CELOS-SOC
Multiple Unauthorized VPN Login Attempts
Hacking Brute-Force
🇹🇼 tyebstx
Wazuh Alert Evidence: Nov 08 11:50:14 ms1.bitstreetx.info postfix/smtpd[1910047]: warning: unknown[192.42.116.60]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
Brute-Force
🇹🇼 tyetriiix
Wazuh Alert Evidence: Nov 08 10:54:03 ms1.triiix.info postfix/submission/smtpd[1451215]: warning: unknown[192.42.116.60]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
Brute-Force
Anonymous
Email spam; Phishing email
Phishing Email Spam
Anonymous
path attack /.git/config
Web App Attack
🇦🇺 LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 4444 [1], 7474 [1] TCP
Port Scan
🇸🇬 drewf.ink
Web App Attack
🇸🇬 drewf.ink
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 217.146.80.102
🇺🇸 216.25.90.84
🇧🇷 205.210.31.217
🇱🇻 185.22.175.148
🇵🇰 182.181.167.226
🇧🇷 177.12.143.230
🇮🇩 163.7.13.62
🇸🇬 162.158.106.93
🇳🇱 109.160.32.174
🇮🇩 103.150.4.69
🇷🇺 95.139.111.251
🇨🇦 85.217.149.70
🇱🇹 78.57.4.150
🇺🇸 66.132.186.170
🇫🇷 51.210.165.156
🇨🇦 50.70.53.101
🇩🇪 47.245.142.0
🇨🇳 36.138.44.211
🇩🇪 195.182.16.23
🇧🇷 177.25.239.92
feedback