This IP address has been reported a total of
14
times from
13 distinct
sources.
72.194.42.131 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 3
reports;
Indonesia
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
6
times;
Hacking
5
times;
Web App Attack
5
times;
Bad Web Bot
2
times;
Port Scan
2
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedOct1418:20:00.3001222026][security2:error][pid2729194:tid2729221][client72.194.42.131:0]ModSecur ...
show more[WedOct1418:20:00.3001222026][security2:error][pid2729194:tid2729221][client72.194.42.131:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"Mozilla/4\\\\\\\\.0\\\\\\\\\(compatible\;Synapse\\\\\\\\\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"115\"][id\"334009\"][rev\"2\"][msg\"Atomicorp.comWAFRules:PotentiallyMaliciousOpenProxyConnectionAttempt\"][severity\"CRITICAL\"][hostname\"autoconfig.lacer.ch\"][uri\"/mail/config-v1.1.xml\"][unique_id\"as-rsH_QQaezsgOQAbS5IwAAARA\"]
show less
HTTP application-layer DoS / botnet traffic from 72.194.42.131: repeated high-cost dynamic page and ...
show moreHTTP application-layer DoS / botnet traffic from 72.194.42.131: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
(From [email protected])(From [email protected]) Hi,
It's October, and we ...
show more(From [email protected])(From [email protected]) Hi,
It's October, and we’d like to give you a free Website & Search Audit.
Whatever you leave unaddressed on your website right now could put you way behind your competitors by next year.
We’ll analyze your SEO, uncover missed ranking opportunities, check your online reputation, and see where other acupuncturists or chiropractors are capturing patients who should be finding you.
We’ll reveal our findings, break down what it's costing your practice, and highlight where you're missing out on local acupuncture or chiropractic searches.
Totally free. Completely no-obligation. Just an honest evaluation of your current blind spots.
Would you like us to run the free audit for you?
Just visit the site below and fill out the short form.
https://tally.so/r/MeZPBA
It takes less than a minute.
Best regards,
Gerald Simmons
Prefer not to hear from me again? Use this link:
https://tally.so/r/2EOWdD
show less
2026-10-06T09:12:32.949969 socky.stom66.co.uk proftpd[40008]: session[40008] 0.0.0.0 (72.194.42.131[ ...
show more2026-10-06T09:12:32.949969 socky.stom66.co.uk proftpd[40008]: session[40008] 0.0.0.0 (72.194.42.131[72.194.42.131]): USER admin: no such user found from 72.194.42.131 [72.194.42.131] to ::ffff:5.79.80.26:2222
...
show less
30 Sep 2026 03:14:01UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more30 Sep 2026 03:14:01UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 72.194.42.131
show less
Email: Login failures from Bad Reputation IP: 72.194.42.131. Threat Score: 5.7/10 (MEDIUM). Reported ...
show moreEmail: Login failures from Bad Reputation IP: 72.194.42.131. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
