This IP address has been reported a total of
302
times from
155 distinct
sources.
192.42.116.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: dpc8dvxsgy3qp.cloudfront.net:80
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:27:18Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:27:18Z and 2026-06-11T20:27:19Z
show less
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/headlights-projectors/mini-headlig ...
show moreRequests denied due to proxy/VPN risk (tenant=82 method=GET path=/headlights-projectors/mini-headlights.html ua='Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1')
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: d3azdm1q0gvo54.cloudfront.net:80
show less
Failed login attempt root/root via OpenSSH 9.9. Session gained access, executed recon: uname, getpro ...
show moreFailed login attempt root/root via OpenSSH 9.9. Session gained access, executed recon: uname, getprop, echo for system enumeration. Dropped executable 'apcid' to /var/tmp/apcid, /bin/apcid, /sbin/apcid, /usr/bin/apcid via cat redirection, chmod +x, exec /var/tmp/apcid. Ran killall -9 .f targeting process termination. LC_ALL=C prefix on all cmds to bypass locale. Attack pattern: weak default creds, OS enum, multi-path malware placement for persistence, process cleanup. No secondary payloads/lateral movement observed. Apcid botnet variant targeting IoT/embedded devices. Brute-force on weak creds.
show less
