JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.243

74.7.243.243 was found in our database!

This IP was reported 339 times. Confidence of Abuse is 88%: ?

88%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.243

Whois 74.7.243.243

IP Abuse Reports for 74.7.243.243:

This IP address has been reported a total of 339 times from 91 distinct sources. 74.7.243.243 was first reported on November 19th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-08-21 01:42:50 (9 hours ago)	CrowdSec detected malicious activity	DDoS Attack
🇵🇱 Budyn	2026-08-20 18:08:34 (16 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.goblinpot.site \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-20 01:02:28 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sql.budyn.top \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇬🇧 Interceptor_HQ	2026-08-19 12:49:05 (1 day ago)	request_uri: / -- automatic report --	Brute-Force Hacking
🇫🇷 conseilgouz	2026-08-19 09:10:58 (2 days ago)	sce-88 : Bloc AI bots=>/(ai.)	Hacking
🇵🇱 Budyn	2026-08-18 17:31:38 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.space \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-08-18 15:59:38 (2 days ago)	(mod_security) mod_security (id:990005) triggered by 74.7.243.243 (US/United States/Georgia/Atlanta/ ... show more (mod_security) mod_security (id:990005) triggered by 74.7.243.243 (US/United States/Georgia/Atlanta/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Aug 18 18:59:34.067507 2026] [security2:error] [pid 1455326:tid 1455328] [remote 74.7.243.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "gptbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "www.endoscope.center"] [uri "/"] [unique_id "aoSBZvd-RABTNONzoigBBgABhQE"] show less	Port Scan
🇫🇷 masterguru	2026-08-18 07:11:05 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.243 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.243 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇵🇱 Budyn	2026-08-18 03:17:06 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.goblinpot.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-17 22:23:22 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-08-17 14:17:08 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.243 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.243 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇳🇱 Site.eu	2026-08-16 22:11:23 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 conseilgouz	2026-08-16 15:16:39 (4 days ago)	vee-88 : Bloc AI bots=>/(ai.)	Hacking
🇬🇷 setupgr	2026-08-16 01:47:07 (5 days ago)	(mod_security) mod_security (id:990005) triggered by 74.7.243.243 (US/United States/Georgia/Atlanta/ ... show more (mod_security) mod_security (id:990005) triggered by 74.7.243.243 (US/United States/Georgia/Atlanta/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:47:03.590621 2026] [security2:error] [pid 490176:tid 490225] [remote 74.7.243.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "gptbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "www.endoscope.center"] [uri "/"] [unique_id "aoEWl-wA2_KwgRsRSzcUtgACVwg"] show less	Port Scan
🇺🇸 MPL	2026-08-14 20:21:50 (6 days ago)	tcp/443 (4 or more attempts)	Port Scan

Showing 1 to 15 of 339 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇼 197.243.14.52

🇺🇸 152.32.183.163

🇺🇸 147.185.132.75

🇳🇱 142.93.224.178

🇨🇳 124.31.105.57

🇺🇸 20.98.166.120

🇦🇷 190.50.138.47

🇧🇷 187.95.169.102

🇺🇸 172.172.186.3

🇫🇮 147.185.133.205

🇺🇸 147.185.132.69

🇺🇸 147.185.132.49

🇨🇳 139.170.73.93

🇨🇳 113.57.186.68

🇺🇸 108.216.102.172

🇳🇱 94.102.49.155

🇩🇪 89.222.108.203

🇩🇪 64.89.163.145

🇨🇳 39.64.104.54

🇺🇸 2607:ff10:c8:594::6