JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.249.202.141

74.249.202.141 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.249.202.141

Whois 74.249.202.141

IP Abuse Reports for 74.249.202.141:

This IP address has been reported a total of 109 times from 96 distinct sources. 74.249.202.141 was first reported on June 15th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 adaml1324	2026-06-16 06:21:06 (11 hours ago)	Web application exploit probing From server logs: 2026-06-15 20:50:06 [domain] GET /wp-content/up ... show more Web application exploit probing From server logs: 2026-06-15 20:50:06 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad] show less	Web App Attack
🇧🇪 taivas.nl	2026-06-16 04:32:41 (12 hours ago)	Many_bad_calls	Web App Attack
🇺🇸 mnsf	2026-06-16 00:17:41 (17 hours ago)	Too many Status 40X (24)	Brute-Force Web App Attack
🇳🇱 vaddilyin	2026-06-15 23:07:50 (18 hours ago)	{"ClientAddr":"74.249.202.141:22673","ClientHost":"74.249.202.141","ClientPort":"22673","ClientUsern ... show more {"ClientAddr":"74.249.202.141:22673","ClientHost":"74.249.202.141","ClientPort":"22673","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":51460,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":51460,"RequestAddr":"rss.vdkln.com","RequestContentSize":0,"RequestCount":48745,"RequestHost":"rss.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-15T23:07:49.422429045Z","StartUTC":"2026-06-15T23:07:49.422429045Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-15T23:07:49Z"} {"ClientAddr":"74.249.202.141:22673","ClientHost":"74.249.202.141","ClientPort":"22673","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":54001,"GzipRatio":0,"OriginContentSize":0,"OriginDurat ... show less	Web App Attack
🇦🇺 Anytech	2026-06-15 23:00:13 (18 hours ago)	Blocked by Conn-Monitor: Web scanning activity	Hacking Web App Attack
Anonymous	2026-06-15 22:56:16 (18 hours ago)	T: f2b 404 5x	Web App Attack
🇦🇺 Block Rockin' Beats	2026-06-15 22:47:03 (18 hours ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 22:39:25 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 74.249.202.141 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 74.249.202.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 18:39:20.169741 2026] [security2:error] [pid 20025:tid 20025] [client 74.249.202.141:33167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.redtowndesign.com"] [uri "/consultantx/wp-config.php"] [unique_id "ajB_GGtKtdHlItFMsEeVEQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Not Fake	2026-06-15 22:38:44 (18 hours ago)	$f2bV_matches	Web App Attack
🇺🇸 mccsoft.io	2026-06-15 22:34:49 (18 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 seal	2026-06-15 22:16:40 (19 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	SSH Brute-Force
🇩🇪 Viveronese	2026-06-15 22:07:36 (19 hours ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-15 22:01:05 (19 hours ago)	Auto-ban: >3000 req/min op 2026-06-15	Web App Attack SSH Hacking
🇨🇦 Mediashaker	2026-06-15 21:56:30 (19 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 74.249.202.141 (US/Unite ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 74.249.202.141 (US/United States/-) show less	Port Scan
🇩🇪 FeG Deutschland	2026-06-15 21:54:34 (19 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.172.146

🇩🇪 213.209.159.56

🇯🇵 212.135.211.50

🇺🇸 184.105.139.85

🇺🇸 162.216.149.176

🇧🇷 129.121.50.86

🇮🇩 103.155.47.102

🇫🇷 91.231.89.150

🇸🇪 90.231.51.54

🇳🇱 89.21.67.163

🇺🇸 66.132.195.61

🇮🇪 54.74.134.78

🇺🇸 195.184.76.215

🇳🇱 185.223.235.60

🇳🇱 176.65.149.201

🇩🇪 167.94.146.59

🇺🇸 162.216.150.213

🇯🇵 160.251.233.185

🇮🇳 122.185.146.18

🇬🇧 101.36.97.88