JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.6

74.7.242.6 was found in our database!

This IP was reported 317 times. Confidence of Abuse is 83%: ?

83%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.6

Whois 74.7.242.6

IP Abuse Reports for 74.7.242.6:

This IP address has been reported a total of 317 times from 94 distinct sources. 74.7.242.6 was first reported on November 19th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-02 17:14:51 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 12:59:03 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:58:59.475858 2026] [security2:error] [pid 4835:tid 4835] [client 74.7.242.6:44532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.deolu.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.deolu.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "apbME1AU8F6CDLF_p1OEWQAAABI"], referer: https://www.deolu.org/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 02:53:47 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:53:42.463981 2026] [security2:error] [pid 8833:tid 8833] [client 74.7.242.6:42770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|crcponcha.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crcponcha.com"] [uri "/wp-json/wp/v2/users/6"] [unique_id "apY-NiiWGV8dKYed5HoS1gAAAAk"], referer: https://crcponcha.com/author/jenmaddocks/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-31 17:45:27 (2 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Request ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.chawan-lenth/withypot-spiritualistically/overglad-chandlery/underbillow-subscribe/Slavonism/coinmaker/causeful-voluminously/Samaritan/news-aromatophor/Kakan/heretoga/amentaceous/disanimal/lively/content/eely/sapropel/unlugged/Bandhor/armarium-ammochryse/tapasvi/regnancy-sunburst/hygrology/pilikai-semiconnate/riroriro/bausond/normativeness-story/declensional-mykiss/Vogul/subsolid-sellably/titanic/tautomerism-remanage/maniple/albarello/sarrusophone/Zenaida-Betta/ringwall-pratensian/surround/funduline/reconcede-backcap/snapy-pulmonectomy/unfined/format-Actaeon/Rembrandt/unplanked/teloptic/Kantism/coinspire/houndish/proclergy/fearful/donatary-guardant/excerpt-mesmerizability/unbar/cyanuret/Semeostoma/drier/repealer/sideshake/cleavage-somberly/cochleate/soilless- show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-31 04:11:10 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.6 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.6 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇪🇸 librebit	2026-08-31 03:16:39 (2 days ago)	Brute force	Brute-Force
🇳🇱 Site.eu	2026-08-31 00:01:26 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-08-29 03:13:18 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:13:12.835528 2026] [security2:error] [pid 524:tid 524] [client 74.7.242.6:40846] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mjkhan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mjkhan.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "apJOSDApTBV3YIa2PPx1jAAAAA0"], referer: https://mjkhan.com/author/jgraves/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-29 02:22:15 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 librebit	2026-08-29 00:44:04 (5 days ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-08-28 10:19:18 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.6 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.6 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 grassau.com	2026-08-27 21:59:46 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.242.6 (US/Unite ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.242.6 (US/United States/Georgia/Atlanta/-) show less	Bad Web Bot
🇪🇸 librebit	2026-08-27 11:28:20 (6 days ago)	Brute force	Brute-Force
🇵🇱 Budyn	2026-08-26 21:55:35 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.goblinpot.website \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-25 04:29:01 (1 week ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 317 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.251

🇫🇷 185.177.72.56

🇸🇬 134.185.86.112

🇫🇷 77.239.124.213

🇳🇱 45.156.128.170

🇧🇷 205.210.31.254

🇳🇱 173.194.170.80

🇺🇸 147.185.132.135

🇦🇺 144.172.65.119

🇲🇾 113.211.129.105

🇳🇱 91.92.47.27

🇸🇬 84.75.150.83

🇬🇧 35.203.210.252

🇺🇸 2604:a880:400:d1:0:4:e8e6:5001

🇩🇪 185.242.3.226

🇧🇷 177.70.72.49

🇳🇱 176.65.149.233

🇳🇱 172.217.40.20

🇺🇸 159.111.20.227

🇫🇷 91.196.152.239