IP address

Search at other sites:

.0045.42.117.101

Shodan(more info)

Passive DNS

IP blacklists

CI Army

5.42.117.101 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-30 02:50:00.950000
Was present on blacklist at: 2026-03-23 03:50, 2026-03-24 03:50, 2026-03-25 03:50, 2026-03-26 03:50, 2026-03-27 03:50, 2026-03-28 03:50, 2026-03-29 02:50, 2026-03-30 02:50

UCEPROTECT L1

5.42.117.101 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-01 07:45:01.338000
Was present on blacklist at: 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45

Threat categories

TL	Role	Category	Details
75	src	scan
40	src	—

---

Warden events (11)

2026-03-27

ReconScanning (node.4dc198): 2

2026-03-26

ReconScanning (node.368407): 1

2026-03-25

ReconScanning (node.4dc198): 1

2026-03-21

AnomalyTraffic (node.6a1878): 1

ReconScanning (node.4dc198): 1

ReconScanning (node.368407): 1

2026-03-20

ReconScanning (node.368407): 2

AnomalyTraffic (node.6a1878): 1

ReconScanning (node.4dc198): 1

DShield reports (IP summary, reports)

2026-03-21

Number of reports: 43

Distinct targets: 33

2026-03-22

Number of reports: 15

Distinct targets: 12

2026-03-25

Number of reports: 37

Distinct targets: 24

2026-03-26

Number of reports: 37

Distinct targets: 24

2026-03-27

Number of reports: 29

Distinct targets: 22

Origin AS

AS9123 - TimeWeb-AS

BGP Prefix

5.42.117.0/24

geo

Russia, Moscow

🕑 Europe/Moscow

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

5.42.0.0 - 5.42.127.255

last_activity

2026-03-27 15:55:07

last_warden_event

2026-03-27 15:55:07

rep

0.0035714285714285713

reserved_range

0

ts_added

2026-03-20 16:31:05.654000

ts_last_update

2026-04-09 16:31:10.684000

Warden event timeline

DShield event timeline

Presence on blacklists