JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.248.132.130

74.248.132.130 was found in our database!

This IP was reported 338 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.248.132.130

Whois 74.248.132.130

IP Abuse Reports for 74.248.132.130:

This IP address has been reported a total of 338 times from 285 distinct sources. 74.248.132.130 was first reported on June 26th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetShield-DE	2026-06-28 23:07:28 (1 hour ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T01:07:01+0200. Last: 2026-06-29T01:07:01+0200. Samples: - 2026-06-28 00:49:29,015 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 74.248.132.130 show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-28 22:02:43 (2 hours ago)	Auto-ban: 206 malicious requests on 2026-06-27 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 206 malicious requests on 2026-06-27 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇩🇪 NetShield-DE	2026-06-28 19:07:30 (5 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T21:07:02+0200. Last: 2026-06-28T21:07:02+0200. Samples: - 2026-06-28 00:49:29,015 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 74.248.132.130 show less	Web App Attack
🇬🇧 Buster	2026-06-28 18:47:00 (5 hours ago)	Usual msoft script kiddies trying to attack random *.php files from Perm Blocked ASN and country	Open Proxy Brute-Force Web App Attack
🇩🇪 NetShield-DE	2026-06-28 14:07:29 (10 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T16:07:01+0200. Last: 2026-06-28T16:07:01+0200. Samples: - 2026-06-28 00:49:29,015 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 74.248.132.130 show less	Web App Attack
Anonymous	2026-06-28 14:03:05 (10 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: PL, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: PL, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇮🇳 walkintoadmin	2026-06-28 10:54:35 (13 hours ago)	scanner probe — datacenter, 0 real-user 200s	Bad Web Bot Web App Attack
Anonymous	2026-06-28 09:08:00 (15 hours ago)	Multiple attacks	Web App Attack Hacking
🇩🇪 NetShield-DE	2026-06-28 09:07:29 (15 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T11:07:01+0200. Last: 2026-06-28T11:07:01+0200. Samples: - 2026-06-28 00:49:29,015 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 74.248.132.130 show less	Web App Attack
Anonymous	2026-06-28 08:48:48 (15 hours ago)	WordPress/Woo probe	Web App Attack
🇩🇪 netclix.gr	2026-06-28 08:44:31 (15 hours ago)	(aggressive_scan) Aggressive Web Exploit Scan 74.248.132.130 (PL/Poland/-): 5 in the last 4600 secs; ... show more (aggressive_scan) Aggressive Web Exploit Scan 74.248.132.130 (PL/Poland/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 74.248.132.130 - - [28/Jun/2026:11:44:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 78495 "-" "-" 74.248.132.130 - - [28/Jun/2026:11:44:16 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 78495 "-" "-" 74.248.132.130 - - [28/Jun/2026:11:44:16 +0300] "GET /7.php HTTP/1.1" 404 78495 "-" "-" 74.248.132.130 - - [28/Jun/2026:11:44:18 +0300] "GET /faze.php HTTP/1.1" 404 78495 "-" "-" 74.248.132.130 - - [28/Jun/2026:11:44:18 +0300] "GET /011i.php HTTP/1.1" 404 78495 "-" "-" show less	Port Scan
🇧🇪 sid3windr	2026-06-28 08:42:19 (15 hours ago)	GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for , wasted 120B)	Web App Attack
🇮🇪 kundukundu	2026-06-28 08:36:32 (15 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
Anonymous	2026-06-28 08:36:16 (15 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 webanyone	2026-06-28 08:30:39 (16 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot

Showing 1 to 15 of 338 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 176.16.77.167

🇺🇸 137.184.193.19

🇸🇬 103.189.235.176

🇳🇴 93.89.113.60

🇺🇸 66.132.172.181

🇨🇳 39.184.74.42

🇹🇼 34.80.78.42

🇺🇸 136.144.35.146

🇸🇬 136.110.59.157

🇨🇳 123.234.207.11

🇵🇭 122.3.55.100

🇮🇪 95.45.165.129

🇩🇪 85.214.114.18

🇷🇺 77.82.172.112

🇧🇷 45.172.182.118

🇯🇵 34.85.20.12

🇨🇳 27.18.79.124

🇮🇳 223.233.87.52

🇻🇳 203.113.174.15

🇹🇼 198.235.24.76