JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.248.185.153

74.248.185.153 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.248.185.153

Whois 74.248.185.153

IP Abuse Reports for 74.248.185.153:

This IP address has been reported a total of 40 times from 35 distinct sources. 74.248.185.153 was first reported on May 29th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 larse99	2026-06-08 20:57:33 (5 days ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇨🇦 Roper123	2026-06-07 14:30:56 (6 days ago)	Web exploits	Hacking Web App Attack
🇧🇪 voormedia	2026-06-07 12:35:36 (6 days ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 aks4226	2026-06-07 12:07:36 (6 days ago)	Bot search, attacking common web applications.	Web App Attack
🇬🇧 Aetherweb Ark	2026-06-07 11:40:35 (6 days ago)	(mod_security) mod_security (id:949110) triggered by 74.248.185.153 (PL/Poland/-): N in the last X s ... show more (mod_security) mod_security (id:949110) triggered by 74.248.185.153 (PL/Poland/-): N in the last X secs show less	Web App Attack
🇩🇪 centurion	2026-06-07 10:12:26 (6 days ago)	Blocked by UFW on ns02 [80/tcp] Source port: 63627 TTL: 118 Packet length: 52 TOS: 0x02 This report ... show more Blocked by UFW on ns02 [80/tcp] Source port: 63627 TTL: 118 Packet length: 52 TOS: 0x02 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-07 09:38:40 (6 days ago)	[07/Jun/2026:12:38:40 +0300] 17808251206.864587 74.248.185.153 64758 148.251.76.218 80 [07/Jun/2026: ... show more [07/Jun/2026:12:38:40 +0300] 17808251206.864587 74.248.185.153 64758 148.251.76.218 80 [07/Jun/2026:12:38:40 +0300] 178082512081.417637 74.248.185.153 64808 148.251.76.218 443 show less	Web App Attack
🇬🇧 Apache	2026-06-07 09:26:27 (6 days ago)	(mod_security) mod_security (id:920170) triggered by 74.248.185.153 (PL/Poland/-): 5 in the last 300 ... show more (mod_security) mod_security (id:920170) triggered by 74.248.185.153 (PL/Poland/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 David Ferneding	2026-06-07 08:16:42 (6 days ago)	Blocked by UFW (TCP on 80) Source port: 64642 TTL: 118 Packet length: 52 TOS: 0x02 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 64642 TTL: 118 Packet length: 52 TOS: 0x02 This report (for 74.248.185.153) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇮 mnazibo	2026-06-07 06:45:16 (1 week ago)	Date: Jun 07 09:25:34 2026 EAT \| Reported IP: 74.248.185.153 mod_security \| id: 920350 930130 949110 ... show more Date: Jun 07 09:25:34 2026 EAT \| Reported IP: 74.248.185.153 mod_security \| id: 920350 930130 949110 \| PL/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
🇯🇵 knock	2026-06-07 05:20:21 (1 week ago)	Knock-Knock honeypot brute-force: proto8 (2 total hits)	Brute-Force
🇫🇮 Yachiyo Runami	2026-06-07 05:10:52 (1 week ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 111 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 111 \| Len: 52B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-06-07T05:10:52Z show less	Port Scan Hacking
🇳🇱 BlueWire Hosting	2026-06-07 04:13:24 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-07 03:10:19 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 74.248.185.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 74.248.185.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 23:10:14.247094 2026] [security2:error] [pid 7836:tid 7836] [client 74.248.185.153:62036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.4"] [uri "/.env"] [unique_id "aiThFjuX1dKM63C5ZOvbHQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Artelis	2026-06-07 03:00:10 (1 week ago)	74.248.185.153 - - [07/Jun/2026:03:00:10 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ... show more 74.248.185.153 - - [07/Jun/2026:03:00:10 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 203.121.40.210

🇧🇷 187.51.208.158

🇨🇳 183.66.166.30

🇨🇳 183.6.64.180

🇨🇳 121.229.202.143

🇨🇦 85.217.149.42

🇹🇼 34.81.101.95

🇳🇱 31.14.32.5

🇷🇺 213.180.203.144

🇬🇧 209.97.139.183

🇳🇵 202.70.78.237

🇺🇸 136.117.17.49

🇰🇷 122.46.77.98

🇻🇳 118.70.182.193

🇻🇳 116.98.104.138

🇫🇷 92.103.134.183

🇨🇦 85.217.149.29

🇫🇷 85.217.140.40

🇺🇸 64.62.197.32

🇺🇸 64.62.156.182