JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.242.46.72

194.242.46.72 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 7%: ?

ISP	MAGIT'ST SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49468
Domain Name	maghost.ro
Country	🇷🇴 Romania
City	Timisoara, Timis County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.242.46.72

Whois 194.242.46.72

IP Abuse Reports for 194.242.46.72:

This IP address has been reported a total of 16 times from 8 distinct sources. 194.242.46.72 was first reported on December 2nd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-04-19 11:45:45 (1 month ago)	{"level":"info","ts":1776599101.880345,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1776599101.880345,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"194.242.46.72","remote_port":"52554","client_ip":"194.242.46.72","proto":"HTTP/1.1","method":"POST","host":"up.skyline.tw","uri":"/auth/requestreset","headers":{"Connection":["Keep-alive"],"Content-Type":["application/json"],"Content-Length":["30"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"],"Accept-Encoding":["gzip,deflate,br"],"User-Agent":["User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; 360SE)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"up.skyline.tw"}},"bytes_read":0,"user_id":"","duration":0.001003738,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1776599101.9187799,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"194.242.46.72","remote_port":"525 ... show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 16:12:08 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 12:12:02.757859 2026] [security2:error] [pid 3442520:tid 3442520] [client 194.242.46.72:59636] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ftp.stmaarten-boatcharters.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ftp.stmaarten-boatcharters.com"] [uri "/"] [unique_id "aeEKUv3tu7tqLyy-I0dkAQAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 12:56:37 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 08:56:31.707516 2026] [security2:error] [pid 202003:tid 202003] [client 194.242.46.72:40766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|boatregistrationdelaware.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "boatregistrationdelaware.com"] [uri "/"] [unique_id "adjzf9MBYL8LQrWQDZtJwgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-04-04 15:41:14 (2 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/catal ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/catalog/category/view/s/dodge/id/2412/ ua='Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4201.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)') show less	Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-03-29 06:13:01 (2 months ago)	ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body ET WEB_SERVER Possible SQL ... show more ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body ET WEB_SERVER Possible SQL Injection WAITFOR DELAY in HTTP URI ET WEB_SERVER Possible SQLi Attempt in User Agent (Inbound) ET WEB_SERVER SQL Injection Select Sleep Time Delay GPL WEB_SERVER 403 Forbidden show less	Port Scan
🇹🇼 kk_it_man	2026-03-29 05:56:02 (2 months ago)	hack	Hacking
🇹🇼 kk_it_man	2026-03-29 05:40:04 (2 months ago)		Hacking
🇹🇼 kk_it_man	2026-03-29 05:23:02 (2 months ago)	ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body GPL WEB_SERVER 403 Forbidde ... show more ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body GPL WEB_SERVER 403 Forbidden show less	Port Scan
🇺🇸 NotTheITperson	2026-03-19 13:02:00 (2 months ago)	Automated bot traffic targeting Adobe Commerce (Magento) storefront. Observed behavior includes: ... show more Automated bot traffic targeting Adobe Commerce (Magento) storefront. Observed behavior includes: - High-frequency requests to /graphql endpoint (~49k requests in 24h) - Repeated calls to /customer/section/load and other AJAX endpoints (session-related, uncached) - Multiple automated add-to-cart requests across various product IDs - Requests to form submission endpoints (/customForm/index/saveform, review/product/post) - Encoded payload-style URL requests (base64-like paths), indicating scripted/browser emulation Traffic pattern is non-human and consistent with scraping and backend resource abuse. show less	Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-03-05 04:09:05 (3 months ago)	194.242.46.72 - - [05/Mar/2026:0 ...	Brute-Force
🇺🇸 TPI-Abuse	2025-12-25 14:36:48 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 09:36:42.489376 2025] [security2:error] [pid 8838:tid 8838] [client 194.242.46.72:45068] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|myhomeflyer.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "myhomeflyer.com"] [uri "/"] [unique_id "aU1L-rCimZXvcPbuTfvmRwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 John Hohlen	2025-12-24 01:13:00 (5 months ago)		Email Spam
🇺🇸 John Hohlen	2025-12-20 16:01:00 (5 months ago)		DDoS Attack
🇬🇧 Globe2	2025-12-02 09:06:03 (6 months ago)	ModSec - Multiple 403s within a short period of time [server: H3]	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:38:39 (6 months ago)	(mod_security) mod_security (id:220150) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:220150) triggered by 194.242.46.72 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:38:33.441983 2025] [security2:error] [pid 2068650:tid 2068650] [client 194.242.46.72:41582] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.\\\\\\\\/)?select)" at ARGS:s. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5671"] [id "220150"] [rev "4"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|smogsandiego.com\|F\|2"] [data "9999')unionselect111,222,(select(concat(0x44617461626173653a20,database()))),4444,5---"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "smogsandiego.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aS6liW05uNHu9OIrmsspKgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.17.87.227

🇺🇸 172.238.171.10

🇺🇸 166.62.41.96

🇺🇸 162.216.150.38

🇭🇰 101.36.117.234

🇱🇾 41.254.95.127

🇺🇸 34.48.193.60

🇨🇳 1.94.143.149

🇺🇸 206.189.229.31

🇸🇬 194.5.82.82

🇺🇸 162.216.150.195

🇫🇷 141.145.202.4

🇭🇰 103.230.240.59

🇮🇹 93.92.78.143

🇺🇸 72.195.181.58

🇹🇼 1.169.40.249

🇨🇳 1.94.132.17

🇺🇸 2607:f8b0:400e:c1e::12d

🇬🇧 193.163.125.212

🇫🇷 185.177.72.68