JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.74.74.242

109.74.74.242 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 43%: ?

43%

ISP	LLC Babilon-T
Usage Type	Fixed Line ISP
ASN	AS24722
Domain Name	babilon-t.tj
Country	🇹🇯 Tajikistan
City	Dushanbe, Dushanbe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.74.74.242

Whois 109.74.74.242

IP Abuse Reports for 109.74.74.242:

This IP address has been reported a total of 10 times from 7 distinct sources. 109.74.74.242 was first reported on December 10th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-10-27 05:47:12 (8 hours ago)	109.74.74.242 - - [27/Oct/2026:06:47:12 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 109.74.74.242 - - [27/Oct/2026:06:47:12 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-10-26 10:51:25 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 06:51:21.037510 2026] [security2:error] [pid 11376:tid 11383] [client 109.74.74.242:43773] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tkfay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tkfay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8wqQpcqXgVSNtnprvAwwAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-10-22 03:15:25 (5 days ago)	http-probing - IP: 109.74.74.242 - time="2026-10-22T05:15:25+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 109.74.74.242 - time="2026-10-22T05:15:25+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 109.74.74.242 (TJ/24722) : 4h ban on Ip 109.74.74.242" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 14:29:42 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:29:35.396394 2026] [security2:error] [pid 15228:tid 15228] [client 109.74.74.242:40385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jessicalevant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicalevant.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atjMT7q1M2jJhzdaoklqogAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SCLwebadministrator	2026-10-21 08:34:00 (6 days ago)	Bruteforce WordPress logins	Brute-Force Web App Attack Hacking
🇮🇹 abuseiphack	2026-10-20 22:20:22 (6 days ago)	Automatic report for brute force attack	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-15 08:38:48 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 109.74.74.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:38:44.652425 2026] [security2:error] [pid 24744:tid 24744] [client 109.74.74.242:8741] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sizefinder.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sizefinder.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atCRFIk96W2lNj8kY65SEwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-14 00:58:09 (1 week ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 109.74.74.242 (TJ/Tajikistan/-): 1 in the las ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 109.74.74.242 (TJ/Tajikistan/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 LRob	2026-10-12 09:42:44 (2 weeks ago)	Web exploit attempt \| method: GET \| path: / \| query: author=3&feed=rss2, author=4&feed=rss2 \| ua: Mo ... show more Web exploit attempt \| method: GET \| path: / \| query: author=3&feed=rss2, author=4&feed=rss2 \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (10 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.165.159.213

🇺🇸 147.185.132.28

🇹🇼 123.194.8.159

🇨🇳 106.59.139.155

🇹🇷 78.135.111.63

🇦🇷 45.177.147.146

🇳🇱 45.148.10.141

🇵🇪 38.25.52.89

🇸🇪 171.25.158.87

🇰🇷 152.32.243.245

🇧🇷 138.36.33.104

🇨🇳 120.48.57.133

🇮🇩 103.76.149.196

🇨🇦 34.47.32.106

🇺🇸 162.216.149.229

🇨🇦 143.110.219.5

🇫🇷 141.94.121.165

🇺🇸 138.197.76.178

🇭🇰 101.36.116.216

🇺🇸 70.183.198.239