JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.249.213.70

74.249.213.70 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.249.213.70

Whois 74.249.213.70

IP Abuse Reports for 74.249.213.70:

This IP address has been reported a total of 211 times from 175 distinct sources. 74.249.213.70 was first reported on July 28th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 05:06:49 (3 minutes ago)	[Wed Jul 29 07:06:30.839862 2026] [authz_core:error] [pid 1763:tid 1823] [client 74.249.213.70:7762] ... show more [Wed Jul 29 07:06:30.839862 2026] [authz_core:error] [pid 1763:tid 1823] [client 74.249.213.70:7762] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/maint/index.php [Wed Jul 29 07:06:48.055654 2026] [authz_core:error] [pid 1763:tid 1821] [client 74.249.213.70:7762] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/ [Wed Jul 29 07:06:48.189913 2026] [authz_core:error] [pid 1763:tid 1826] [client 74.249.213.70:7762] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/colors/blue/ ... show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-29 04:41:10 (29 minutes ago)	Attempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unaut ... show more Attempted access to sensitive endpoint (/wp-admin/maint/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 maxpower	2026-07-29 04:23:39 (46 minutes ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 74.249.213.70 (US/United States/-): 1 in the last 3 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 74.249.213.70 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 74.249.213.70 - - [29/Jul/2026:06:23:26 +0200] "GET /lock360.php HTTP/2.0" 404 14667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70" host=ilgiardinodeiciliegi.villapardi.it show less	Port Scan
🇲🇽 octageeks.com	2026-07-29 04:12:38 (57 minutes ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇨🇦 Mediashaker	2026-07-29 04:05:40 (1 hour ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 74.249.213.70 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 74.249.213.70 (US/United States/-) show less	Port Scan
🇺🇸 deskpass.com	2026-07-29 04:04:32 (1 hour ago)	GET /p.php	Web App Attack
🇺🇸 helios.live	2026-07-29 03:59:58 (1 hour ago)	2026/07/29 03:59:57 [error] 2433590#2433590: 60614 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/07/29 03:59:57 [error] 2433590#2433590: 60614 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.249.213.70, server: kocerroxy.com, request: "GET /inputs.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 74.249.213.70 - - [29/Jul/2026:03:59:57 +0000] "GET /inputs.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2026/07/29 03:59:57 [error] 2433590#2433590: *60614 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.249.213.70, server: kocerroxy.com, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com" 74.249.213.70 - - [29/Jul/2026:03:59:57 +0000] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Web App Attack
🇺🇸 doll.gl	2026-07-29 03:54:48 (1 hour ago)	74.249.213.70 - - [29/Jul/2026:03:54:47 +0000] "GET /wp-admin/ HTTP/1.1" 200 280 "-" "Mozilla/5.0 (W ... show more 74.249.213.70 - - [29/Jul/2026:03:54:47 +0000] "GET /wp-admin/ HTTP/1.1" 200 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-07-29 03:54:25 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Epimetheus	2026-07-29 03:52:49 (1 hour ago)	Unauthorized access attempts: [GET] /themes.php [GET] /wp-includes/fonts/ [GET] /wp-content/themes/ ... show more Unauthorized access attempts: [GET] /themes.php [GET] /wp-includes/fonts/ [GET] /wp-content/themes/index.php [GET] /ms-edit.php [GET] /wp-content/themes/admin.php [GET] /x.php [GET] /666.php [GET] /xleet.php [GET] /file.php [GET] /admin.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇬🇧 Greg Poulson	2026-07-29 03:45:36 (1 hour ago)	Our website was hit by this DDOS at a rate of 23 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇸🇬 ipidentify	2026-07-29 03:39:45 (1 hour ago)	2026-07-29T03:39:45Z GET /wp-admin/ 2026-07-29T03:39:51Z GET /wp-admin/wp.php 2026-07-29T03:40:00Z G ... show more 2026-07-29T03:39:45Z GET /wp-admin/ 2026-07-29T03:39:51Z GET /wp-admin/wp.php 2026-07-29T03:40:00Z GET /wp-admin/js/ 2026-07-29T03:40:03Z GET /wp-admin/js/index.php 2026-07-29T03:40:05Z GET /wp-admin/css/colors/ectoplasm/ 2026-07-29T03:40:06Z GET /wp-admin/classwithtostring.php show less	Web App Attack
🇩🇪 AetherFox	2026-07-29 03:37:26 (1 hour ago)	AetherFox VoidGuard detected: [Wed Jul 29 03:37:25.985241 2026] [authz_core:error] [pid 3268680:tid ... show more AetherFox VoidGuard detected: [Wed Jul 29 03:37:25.985241 2026] [authz_core:error] [pid 3268680:tid 3268727] [client 74.249.213.70:12660] AH01630: client denied by server configuration: proxy:https://[MASKED]/inputs.php [Wed Jul 29 03:37:26.213488 2026] [authz_core:error] [pid 3268680:tid 3268733] [client 74.249.213.70:12660] AH01630: client denied by server configuration: proxy:https://[MASKED]/admin.php [Wed Jul 29 03:37:26.328045 2026] [authz_core:error] [pid 3268680:tid 3268721] [client 74.249.213.70:12660] AH01630: client denied by server configuration: proxy:https://[MASKED]/goods.php [Wed Jul 29 03:37:26.442455 2026] [authz_core:error] [pid 3268680:tid 3268731] [client 74.249.213.70:12660] AH01630: client denied by server configuration: proxy:https://[MASKED]/file.php [Wed Jul 29 03:37:26.600092 2026] [authz_core:error] [pid 3268680:tid 3268697] [client 74.249.213.70:12660] AH01630: client denied by server configuration: proxy:https://[MASKED]/ ... show less	Bad Web Bot Web App Attack
🇧🇬 HighWay	2026-07-29 03:33:34 (1 hour ago)	74.249.213.70 - - [29/Jul/2026:03:33:28 +0000] "GET /inputs.php HTTP/1.1" 404 63328 "-" "Mozilla/5.0 ... show more 74.249.213.70 - - [29/Jul/2026:03:33:28 +0000] "GET /inputs.php HTTP/1.1" 404 63328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:03:33:29 +0000] "GET /admin.php HTTP/1.1" 404 59492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:03:33:30 +0000] "GET /goods.php HTTP/1.1" 404 59470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:03:33:31 +0000] "GET /file.php HTTP/1.1" 404 63405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:03:33:32 +0000] "GET /adminfuns.php HTTP/1.1" 404 59400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari ... show less	Port Scan Bad Web Bot
Anonymous	2026-07-29 03:29:49 (1 hour ago)	74.249.213.70 - - [29/Jul/2026:05:29:23 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 ... show more 74.249.213.70 - - [29/Jul/2026:05:29:23 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:05:29:25 +0200] "GET /admin.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:05:29:26 +0200] "GET /goods.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:05:29:26 +0200] "GET /file.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.249.213.70 - - [29/Jul/2026:05:29:26 +0200] "GET /adminfuns.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	DDoS Attack

Showing 1 to 15 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇷🇴 193.32.162.34

🇮🇳 136.232.11.10

🇺🇸 104.28.247.219

🇺🇿 84.54.73.76

🇳🇱 83.83.112.125

🇮🇪 18.201.108.198

🇬🇧 2.58.73.244

🇺🇦 194.39.227.111

🇬🇧 193.163.125.82

🇪🇨 177.234.223.61

🇺🇦 176.119.233.240

🇺🇸 167.99.107.57

🇺🇸 149.75.207.152

🇱🇹 141.98.10.78

🇨🇳 122.243.190.77

🇨🇿 93.185.9.225

🇺🇸 91.230.168.82

🇰🇬 89.237.200.127

🇺🇸 47.254.95.84