JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.248.24.12

74.248.24.12 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.248.24.12

Whois 74.248.24.12

IP Abuse Reports for 74.248.24.12:

This IP address has been reported a total of 128 times from 109 distinct sources. 74.248.24.12 was first reported on August 22nd 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-22 15:35:25 (12 minutes ago)	74.248.24.12 - - [22/Aug/2026:17:35:24 +0200] "GET /inputs.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (W ... show more 74.248.24.12 - - [22/Aug/2026:17:35:24 +0200] "GET /inputs.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 74.248.24.12 - - [22/Aug/2026:17:35:25 +0200] "GET /admin.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 74.248.24.12 - - [22/Aug/2026:17:35:25 +0200] "GET /goods.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 chronos	2026-08-22 15:33:32 (14 minutes ago)	[AUTORAVALT][[22/08/2026 - 12:33:32 -03:00 UTC] Attack from [Microsoft Corporation] [74.248.24.12] A ... show more [AUTORAVALT][[22/08/2026 - 12:33:32 -03:00 UTC] Attack from [Microsoft Corporation] [74.248.24.12] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
Anonymous	2026-08-22 15:25:31 (22 minutes ago)	Web application attack detected.	Web App Attack
🇺🇦 Olexiy Backend	2026-08-22 15:23:22 (24 minutes ago)	74.248.24.12 ...	Bad Web Bot Web App Attack
🇺🇸 helios.live	2026-08-22 15:22:22 (25 minutes ago)	2026/08/22 15:22:21 [error] 1709530#1709530: 696057 FastCGI sent in stderr: "Primary script unknown ... show more 2026/08/22 15:22:21 [error] 1709530#1709530: 696057 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.24.12, server: kocerroxy.com, request: "GET /inputs.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 74.248.24.12 - - [22/Aug/2026:15:22:21 +0000] "GET /inputs.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2026/08/22 15:22:21 [error] 1709530#1709530: *696057 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.24.12, server: kocerroxy.com, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 74.248.24.12 - - [22/Aug/2026:15:22:21 +0000] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML ... show less	Web App Attack
🇩🇪 enjoyably	2026-08-22 15:13:08 (34 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-08-22 15:11:37 (36 minutes ago)	(PERMBLOCK) 74.248.24.12 (PL/Poland/-) has had more than 4 temp blocks in the last 86400 secs; Ports ... show more (PERMBLOCK) 74.248.24.12 (PL/Poland/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇧 consul.to	2026-08-22 15:09:37 (38 minutes ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 CoreTech srl	2026-08-22 15:08:06 (39 minutes ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=ircsport.it ip=74.248.24.12 richieste=81 rischio=AL ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=ircsport.it ip=74.248.24.12 richieste=81 rischio=ALTO score=14 motivi=richieste_elevate,diverse_uri_uniche,molti_404,molti_403,path_sospetti,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇩🇪 auridh	2026-08-22 15:07:52 (40 minutes ago)	Ip 74.248.24.12 performed 'crowdsecurity/http-probing' (11 events over 492.350412ms) at 2026-08-22 1 ... show more Ip 74.248.24.12 performed 'crowdsecurity/http-probing' (11 events over 492.350412ms) at 2026-08-22 12:37:22.796780168 +0000 UTC show less	Web App Attack
🇩🇪 Petros Stefanakis	2026-08-22 15:05:43 (42 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 74.248.24.12 (PL/Poland/-)	SQL Injection
🇹🇭 thaizone.com	2026-08-22 15:03:09 (44 minutes ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
🇫🇮 Kimmo Rieskaniemi	2026-08-22 15:01:47 (46 minutes ago)	CrowdSec triggered crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇩🇪 on-com	2026-08-22 15:00:03 (47 minutes ago)	URL scan	Brute-Force Web App Attack
🇩🇪 KiekerJan	2026-08-22 14:58:28 (49 minutes ago)	74.248.24.12 - - [22/Aug/2026:16:58:27 +0200] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 181 "-" ... show more 74.248.24.12 - - [22/Aug/2026:16:58:27 +0200] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [22/Aug/2026:16:58:27 +0200] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.27.129.78

🇮🇳 103.207.180.178

🇳🇱 45.148.10.157

🇩🇪 194.88.98.114

🇺🇸 172.217.118.4

🇪🇬 84.36.150.130

🇳🇱 80.82.77.202

🇫🇷 51.77.158.34

🇳🇱 45.154.98.248

🇩🇴 38.210.90.13

🇬🇧 217.154.42.110

🇺🇸 172.236.228.193

🇦🇷 149.87.60.247

🇺🇸 96.224.82.250

🇳🇱 91.92.42.10

🇱🇹 62.60.130.253

🇮🇳 223.188.86.221

🇺🇸 193.3.53.11

🇺🇸 162.216.149.22

🇫🇷 85.217.140.8