JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.241.58

74.7.241.58 was found in our database!

This IP was reported 341 times. Confidence of Abuse is 89%: ?

89%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.241.58

Whois 74.7.241.58

IP Abuse Reports for 74.7.241.58:

This IP address has been reported a total of 341 times from 83 distinct sources. 74.7.241.58 was first reported on November 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 01:15:23 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 74.7.241.58 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.241.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:15:17.126964 2026] [security2:error] [pid 1554752:tid 1554752] [client 74.7.241.58:34512] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pointandshootfilm.com\|F\|2"] [data ".facebook.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pointandshootfilm.com"] [uri "/www.facebook.com"] [unique_id "amQOJSQY0Jl5Bdl6iQMNtQAAACE"], referer: http://pointandshootfilm.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-07-24 20:00:37 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-24T19:20:09Z Ray ID: a20547d5d8934f7b UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-24 06:19:08 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack
Anonymous	2026-07-24 04:08:05 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇫🇷 masterguru	2026-07-22 07:12:02 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.58 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.58 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 Skyrider	2026-07-21 22:47:20 (4 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇫🇷 Dorian GRANDHAY	2026-07-17 22:57:35 (1 week ago)	(PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs ... show more (PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-16 12:05:36 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.58 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 08:05:31.017557 2026] [security2:error] [pid 32534:tid 32534] [client 74.7.241.58:55172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|desertautoworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desertautoworks.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aljJCwq5_thbnJKig8fD7QAAAAw"], referer: https://desertautoworks.com/author/cleanwordpressadministrator/ show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-15 00:12:06 (1 week ago)	4.756 requests from abuseipdb.com blacklisted IP (8mos3w5d)	Brute-Force Bad Web Bot
🇬🇧 Mendip_Defender	2026-07-14 05:14:10 (1 week ago)	74.7.241.58 - - [14/Jul/2026:06:14:00 +0100] "GET / HTTP/1.1" 403 4984 "-" "Mozilla/5.0 AppleWebKit/ ... show more 74.7.241.58 - - [14/Jul/2026:06:14:00 +0100] "GET / HTTP/1.1" 403 4984 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Bad Web Bot
🇫🇷 Dorian GRANDHAY	2026-07-14 02:31:33 (1 week ago)	(PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs ... show more (PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇨🇭 4server	2026-07-13 22:44:23 (1 week ago)	[TueJul1400:44:18.7111932026][security2:error][pid195295:tid195715][client74.7.241.58:0]ModSecurity: ... show more [TueJul1400:44:18.7111932026][security2:error][pid195295:tid195715][client74.7.241.58:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"foodelivery.benvenutialfood.ch\"][uri\"/xmlrpc.php\"][unique_id\"alVqQtQcYoMBxEZ-nmf2rAAAAQc\"]\,referer:https://foodelivery.benvenutialfood.ch/pagina-di-esempio/ show less	Hacking Web App Attack
🇫🇷 Dorian GRANDHAY	2026-07-12 20:31:33 (1 week ago)	(PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs ... show more (PERMBLOCK) 74.7.241.58 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇧 Mendip_Defender	2026-07-12 02:54:44 (2 weeks ago)	74.7.241.58 - - [12/Jul/2026:03:54:34 +0100] "GET / HTTP/1.1" 403 4984 "-" "Mozilla/5.0 AppleWebKit/ ... show more 74.7.241.58 - - [12/Jul/2026:03:54:34 +0100] "GET / HTTP/1.1" 403 4984 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Bad Web Bot
Anonymous	2026-07-11 21:09:02 (2 weeks ago)	Unauthorized SSH login attempts	Brute-Force SSH

Showing 1 to 15 of 341 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇰 213.81.146.149

🇹🇼 198.235.24.57

🇺🇸 172.253.86.20

🇺🇸 147.185.132.37

🇮🇳 103.248.94.63

🇨🇳 60.166.82.3

🇺🇸 45.154.154.29

🇶🇦 34.18.141.120

🇨🇳 211.103.219.51

🇧🇷 206.42.8.243

🇩🇪 185.209.196.229

🇳🇱 176.65.149.67

🇺🇸 172.202.26.222

🇳🇱 160.119.76.64

🇩🇪 130.12.182.225

🇳🇱 81.19.216.71

🇹🇷 78.173.22.104

🇲🇾 47.250.37.210

🇳🇱 45.148.10.152

🇬🇧 35.203.210.20