JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.248.158.250

74.248.158.250 was found in our database!

This IP was reported 234 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.248.158.250

Whois 74.248.158.250

IP Abuse Reports for 74.248.158.250:

This IP address has been reported a total of 234 times from 189 distinct sources. 74.248.158.250 was first reported on June 25th 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-25 21:17:51 (10 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 WizardsToolkit	2026-06-25 21:17:00 (11 minutes ago)	attempted to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇺🇸 slay3r9903	2026-06-25 21:14:53 (13 minutes ago)	IP address blocked by Cloudflare Rate Limiting rule due to suspicious activity and security violatio ... show more IP address blocked by Cloudflare Rate Limiting rule due to suspicious activity and security violations. show less	Hacking Bad Web Bot
🇩🇪 Bedios GmbH	2026-06-25 21:06:13 (22 minutes ago)	Wordpress hacking attempt	Web App Attack
🇵🇱 alianet	2026-06-25 20:57:33 (31 minutes ago)	[Thu Jun 25 20:57:32.587740 2026] [proxy_fcgi:error] [pid 3212205:tid 3212252] [client 74.248.158.25 ... show more [Thu Jun 25 20:57:32.587740 2026] [proxy_fcgi:error] [pid 3212205:tid 3212252] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:32.732465 2026] [proxy_fcgi:error] [pid 3212205:tid 3212253] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:32.852389 2026] [proxy_fcgi:error] [pid 3212205:tid 3212254] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:32.878099 2026] [proxy_fcgi:error] [pid 3212205:tid 3212255] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:32.933272 2026] [proxy_fcgi:error] [pid 3212205:tid 3212256] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:32.946005 2026] [proxy_fcgi:error] [pid 3212205:tid 3212257] [client 74.248.158.250:2718] AH01071: Got error 'Primary script unknown' [Thu Jun 25 20:57:33.081563 2026] [proxy_fcgi:error] [pid 3212205:tid 3212234] [client 7 ... show less	Port Scan Web App Attack
Anonymous	2026-06-25 20:57:27 (31 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇳🇱 CryptoYakari	2026-06-25 20:50:15 (38 minutes ago)	74.248.158.250 - - [25/Jun/2026:23:50:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 74.248.158.250 - - [25/Jun/2026:23:50:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 8018 "-" "-" 74.248.158.250 - - [25/Jun/2026:23:50:11 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 3061 "-" "-" 74.248.158.250 - - [25/Jun/2026:23:50:12 +0300] "GET /7.php HTTP/1.0" 404 3055 "-" "-" 74.248.158.250 - - [25/Jun/2026:23:50:12 +0300] "GET /faze.php HTTP/1.0" 404 3058 "-" "-" 74.248.158.250 - - [25/Jun/2026:23:50:12 +0300] "GET /011i.php HTTP/1.0" 404 3056 "-" "-" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇵🇱 Roper123	2026-06-25 20:48:43 (40 minutes ago)	Web app exploits	Web App Attack
🇵🇹 rncbc	2026-06-25 20:48:09 (40 minutes ago)	[Thu Jun 25 21:48:08.410077 2026] [authz_core:error] [pid 1633371:tid 1633371] [client 74.248.158.25 ... show more [Thu Jun 25 21:48:08.410077 2026] [authz_core:error] [pid 1633371:tid 1633371] [client 74.248.158.250:2088] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/wp-content [Thu Jun 25 21:48:08.844366 2026] [authz_core:error] [pid 1633371:tid 1633371] [client 74.248.158.250:2088] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/this_is_a_new_hello_world.php [Thu Jun 25 21:48:09.008209 2026] [authz_core:error] [pid 1633371:tid 1633371] [client 74.248.158.250:2088] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/7.php ... show less	Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2026-06-25 20:43:25 (45 minutes ago)		DNS Compromise DDoS Attack
🇮🇹 zenmorro	2026-06-25 20:37:41 (51 minutes ago)	Honeypot hit (n8n:5678) — scanner-path: /wp-admin/css/colors/blue/file.php. Automated report from ho ... show more Honeypot hit (n8n:5678) — scanner-path: /wp-admin/css/colors/blue/file.php. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇷🇺 ago.su	2026-06-25 20:28:21 (1 hour ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack
🇬🇧 cybersteve99	2026-06-25 20:23:03 (1 hour ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇩🇪 hbrks	2026-06-25 20:21:45 (1 hour ago)	48 attack(s) detected, such as these: {"event":"web_block","ip":"74.248.158.250","host":"ns1.marche- ... show more 48 attack(s) detected, such as these: {"event":"web_block","ip":"74.248.158.250","host":"ns1.marche-be.com","request":"GET /wp-ws68.php HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-25T20:21:45 00:00","logentry":"ns1.marche-be.com 74.248.158.250 - - [25/Jun/2026:20:21:45 0000] \"GET /wp-ws68.php HTTP/1.1\" 503 190 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/0NXH2ILZJ0G/1 IP Details *: https://p4u.xyz/0NXH2ILZJ0G/2 show less	Web Spam Hacking Bad Web Bot
🇬🇧 Smish	2026-06-25 20:19:09 (1 hour ago)	HONEYPOT HIT --> Fail2ban time=1782418742 log=2026-06-25T21:19:02+01:00 ip=74.248.158.250 host=vmhos ... show more HONEYPOT HIT --> Fail2ban time=1782418742 log=2026-06-25T21:19:02+01:00 ip=74.248.158.250 host=vmhost01.mci.as210667.net method=GET uri="/wp-admin/css/colors/blue/file.php" status=404 ua="-" ref="-" rid=a9d18664f3085b5252567f1332cce94e show less	Web App Attack

Showing 1 to 15 of 234 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.208.175.2

🇮🇳 98.70.50.166

🇮🇩 202.65.231.101

🇨🇳 180.153.91.15

🇺🇸 162.215.222.177

🇬🇧 104.143.232.83

🇺🇸 92.71.124.101

🇷🇴 80.94.92.234

🇺🇸 72.212.88.33

🇨🇳 60.10.50.90

🇺🇸 216.25.89.136

🇩🇪 193.174.89.19

🇳🇱 176.65.149.236

🇺🇸 20.65.154.117

🇳🇱 5.61.209.92

🇷🇺 176.215.55.107

🇳🇬 152.32.141.40

🇺🇸 141.11.88.6

🇨🇳 111.60.67.143

🇩🇪 85.214.154.50