JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.229

74.7.243.229 was found in our database!

This IP was reported 411 times. Confidence of Abuse is 97%: ?

97%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.229

Whois 74.7.243.229

IP Abuse Reports for 74.7.243.229:

This IP address has been reported a total of 411 times from 93 distinct sources. 74.7.243.229 was first reported on November 19th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-17 20:37:40 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.astropot.tech \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-08-17 18:01:06 (4 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-17T17:19:15Z Ray ID: a2ca57bb58d3d1b4 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇫🇷 masterguru	2026-08-17 10:13:42 (12 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 Charlesiv	2026-08-15 06:00:47 (2 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-15T05:00:53Z Ray ID: a2b5a362399afc73 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇺🇸 Mehmet_The_Script_Kiddie	2026-08-15 03:47:03 (2 days ago)	CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-14 23:38:28 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-08-14 21:26:35 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 nodepile	2026-08-14 16:46:26 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/umnitza-ice-v6-n-bmw-led-up ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/umnitza-ice-v6-n-bmw-led-upgrade-angel-eyes-wl-p-6041.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)') show less	Web App Attack Exploited Host
🇬🇧 Apache	2026-08-13 21:18:10 (4 days ago)	(mod_security) mod_security (id:930130) triggered by 74.7.243.229 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:930130) triggered by 74.7.243.229 (US/United States/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-12 18:04:05 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-08-12 15:53:28 (5 days ago)	Reported from Nginx log analysis 17. Log: 74.7.243.229 - - [12/Aug/2026:xx:xx:xx 0200] "GET / HTTP/ ... show more Reported from Nginx log analysis 17. Log: 74.7.243.229 - - [12/Aug/2026:xx:xx:xx 0200] "GET / HTTP/2.0" xxx xxx "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; https://openai.com/gptbot)" "-" "US United States Atlanta" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇫🇷 masterguru	2026-08-12 14:54:18 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.229 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-12 10:19:32 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.243.229 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 74.7.243.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 06:19:25.897780 2026] [security2:error] [pid 18729:tid 18729] [client 74.7.243.229:50710] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.silkenswift.borzois.com\|F\|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.silkenswift.borzois.com"] [uri "/www.borzois.com"] [unique_id "anxIrb0r7HgmxSXCRpE0DAAAAA0"], referer: https://www.silkenswift.borzois.com/aurora.bio.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-12 05:40:33 (5 days ago)	apache vulnerability scan	Web App Attack
🇪🇸 librebit	2026-08-12 04:43:05 (5 days ago)	Brute force	Brute-Force

Showing 1 to 15 of 411 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.185

🇹🇼 198.235.24.29

🇪🇬 193.227.54.55

🇵🇭 180.195.116.131

🇨🇳 101.74.169.216

🇺🇸 66.132.195.98

🇺🇸 66.132.172.131

🇸🇬 47.236.77.9

🇻🇪 45.186.208.76

🇱🇹 213.176.26.87

🇨🇳 120.193.9.169

🇨🇳 58.242.110.216

🇧🇷 45.171.210.85

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇻🇳 116.110.156.161

🇲🇦 105.69.124.131

🇨🇳 43.226.44.190

🇬🇧 37.10.113.215

🇺🇸 35.132.102.10