This IP address has been reported a total of
16
times from
16 distinct
sources.
5.42.118.174 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
8
times;
Port Scan
6
times;
Hacking
4
times;
Web Spam
1
time;
Bad Web Bot
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated: 15 requests with error status in 120s window from 5.42.118.174.
Evidence: /opt/app/.env:4 ...
show moreAutomated: 15 requests with error status in 120s window from 5.42.118.174.
Evidence: /opt/app/.env:404,/app/.env:404,/api/.env:404,/backend/.env:404,/config/.env:404,/.env.save:404,/.env.old:404,/.env.bak:404,/.env.backup:404,/.env.dev:404,/.env.staging:404,/.env.production:404,/.env.prod:404,/.env.local:404,/.env:404
show less
Web App Attack
Anonymous
Port scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 63% (10 Meldungen, R ...
show morePort scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 63% (10 Meldungen, RU)
show less
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 25 request eve ...
show moreHoneypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 25 request event(s), 25 distinct path(s), 24 request(s) to suspicious path(s). Examples: /.env, /.env.backup, /.env.bak, /.env.dev, /.env.local.
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
Blocked by firewall on hugin [3000/tcp] | Rule: UFW | SPT: 43730 | TTL: 246 | LEN: 44 | TOS: 0x00 • ...
show moreBlocked by firewall on hugin [3000/tcp] | Rule: UFW | SPT: 43730 | TTL: 246 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on port 3000).
Source port: 51621
TTL: 244
Packet length: 44
TOS: 0x00
This rep ...
show moreBlocked by UFW (TCP on port 3000).
Source port: 51621
TTL: 244
Packet length: 44
TOS: 0x00
This report (for 5.42.118.174) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026/10/10 15:32:38 [error] 3582451#3582451: *942910 FastCGI sent in stderr: "; PHP message: BOT WAR ...
show more2026/10/10 15:32:38 [error] 3582451#3582451: *942910 FastCGI sent in stderr: "; PHP message: BOT WARNING: visitor used the honeypot: 5.42.118.174, url was '192.248.152.121' and abuseipdb '33', function: ELP_site_live" while reading upstream, client: 5.42.118.174, server: www.elivecd.org, request: "POST / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.4-fpm-elivewp.sock:", host: "192.248.152.121:443"
...
show less
IDS alert: ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property ...
show moreIDS alert: ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property ~ (TCP/80); ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body (TCP/80); ET HUNTING Javascript Sandbox Escape via Global Object (process) (TCP/80) [1 event, 2026-10-10T13:53:31Z; auto-reported by CrowdSec]
show less
