JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.247

74.7.243.247 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 97%: ?

97%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.247

Whois 74.7.243.247

IP Abuse Reports for 74.7.243.247:

This IP address has been reported a total of 315 times from 99 distinct sources. 74.7.243.247 was first reported on November 19th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-20 18:02:57 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.definitelynotahoneypot.online \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-08-19 10:01:29 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-19T09:34:13Z Ray ID: a2d8294689dec010 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇫🇷 Dorian GRANDHAY	2026-08-19 07:11:12 (1 day ago)	(PERMBLOCK) 74.7.243.247 (US/United States/-) has had more than 4 temp blocks in the last 604800 sec ... show more (PERMBLOCK) 74.7.243.247 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-08-19 07:10:02 (1 day ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-08-18 10:03:00 (2 days ago)	74.7.243.247 - - [18/Aug/2026:12:02:59 +0200] "GET /deb/ HTTP/1.1" 403 5793 "https://forum.banana-pi ... show more 74.7.243.247 - - [18/Aug/2026:12:02:59 +0200] "GET /deb/ HTTP/1.1" 403 5793 "https://forum.banana-pi.org" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Web App Attack
🇵🇱 Budyn	2026-08-18 03:48:58 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.teddypot.tech \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-17 22:32:52 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Charlesiv	2026-08-17 14:17:10 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-08-17T14:15:59Z Ray ID: a2c94b42ca64d7da UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇫🇷 masterguru	2026-08-17 11:37:42 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.247 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.247 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-08-15 22:12:51 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-08-15 10:53:21 (5 days ago)	WordPress probing \| req: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; co ... show more WordPress probing \| req: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 08:53:21 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.243.247 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 74.7.243.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 04:53:17.066684 2026] [security2:error] [pid 1917141:tid 1917164] [client 74.7.243.247:36914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.aafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.aafm.org"] [uri "/www.GAFM.com"] [unique_id "aoAo_RclW3J2iBtbqC5U_AAAAYw"], referer: https://mail.aafm.org/fintech.html show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-13 17:47:59 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 librebit	2026-08-12 13:35:43 (1 week ago)	Brute force	Brute-Force
🇦🇺 2000cn.com.au	2026-08-12 12:55:33 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇺 197.227.8.186

🇺🇸 91.230.168.50

🇩🇪 213.209.159.228

🇳🇱 193.29.139.132

🇨🇳 192.140.175.158

🇦🇷 190.12.104.147

🇲🇽 189.217.96.223

🇺🇦 176.105.198.78

🇺🇸 168.62.48.100

🇧🇴 166.114.173.210

🇺🇸 162.216.150.196

🇫🇮 147.185.133.235

🇨🇳 110.166.76.195

🇪🇸 94.73.44.52

🇺🇸 66.228.47.200

🇺🇸 34.228.104.231

🇵🇱 2.26.148.64

🇨🇳 223.104.83.99

🇺🇸 216.244.81.2

🇨🇱 201.223.44.26