JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.1

74.7.242.1 was found in our database!

This IP was reported 422 times. Confidence of Abuse is 98%: ?

98%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.1

Whois 74.7.242.1

IP Abuse Reports for 74.7.242.1:

This IP address has been reported a total of 422 times from 98 distinct sources. 74.7.242.1 was first reported on November 19th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-02 15:38:02 (9 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-09-02 11:25:16 (13 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇰 SaltySoftworks	2026-09-01 00:31:55 (2 days ago)	User agent spoofing	Spoofing
🇫🇷 masterguru	2026-08-31 11:27:16 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-31 08:40:37 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:40:30.800324 2026] [security2:error] [pid 13658:tid 13658] [client 74.7.242.1:46586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|drwolberg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drwolberg.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "apU9_rz0Ya-TPbmO9V2pXQAAAAQ"], referer: https://drwolberg.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-31 02:39:41 (2 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Request ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.nyctalopia/tropic/semiflexed/wrathiness/hurt/megalopa-Hyperotreti/helminthagogue/Fungia-wireworking/P/unverifiedness/stiltify/rushen/chabasie/recompose/demitint-extraocular/inagglutinable/sashing/armoried/riot/hackler/psaltress/organozinc/duodenoscopy/cinchonize/glassen-equicurve/echinoid/resina-sandaracin/ablactation-superhistorical/unretired/geneticist-froughy/twineless-unhoist/rabidly/reiterant/intercosmically-restack/octopod-historically/collogue/waucht-cephalorachidian/northing/undercasing-hala/pectoralgia/faradizer-mormaordom/sprightfulness/generale/digametic-smocking/agathodaemonic-sort/supercarpal/reconciliatory/peace/tricephalic/sheng/type/landladyish/Lallan-theatrician/intellectual/antal/opinion-poundlike/semidrachm-Neptunean/submontagne-associable show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 02:01:25 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇵🇱 Budyn	2026-08-28 08:33:24 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.astropot.online \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-08-28 04:00:18 (5 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-28T02:53:32Z Ray ID: a32006b319c797e2 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇳🇱 Site.eu	2026-08-28 03:48:19 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Vegascosmetics	2026-08-28 03:10:18 (5 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 80>=65, Abuse 90, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇳🇱 Site.eu	2026-08-26 13:10:15 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 librebit	2026-08-26 00:10:06 (1 week ago)	Brute force	Brute-Force
🇳🇱 Site.eu	2026-08-24 00:33:46 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇵🇱 Budyn	2026-08-22 18:35:58 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.definitelynotahoneypot.top \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 422 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.122.10.95

🇦🇷 181.45.208.232

🇫🇮 147.185.133.181

🇰🇷 118.47.236.227

🇿🇦 102.206.92.180

🇹🇷 94.154.43.180

🇧🇬 79.124.59.186

🇺🇸 40.160.50.120

🇺🇸 204.236.178.177

🇳🇱 193.118.52.222

🇦🇷 181.27.4.200

🇧🇷 170.247.5.142

🇩🇿 105.96.13.6

🇺🇸 104.131.9.147

🇮🇩 103.77.107.199

🇹🇷 94.154.43.151

🇫🇷 91.196.152.125

🇳🇱 81.19.216.124

🇩🇪 80.66.197.96

🇩🇪 69.5.169.230