JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.241.11

74.7.241.11 was found in our database!

This IP was reported 252 times. Confidence of Abuse is 88%: ?

88%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.241.11

Whois 74.7.241.11

IP Abuse Reports for 74.7.241.11:

This IP address has been reported a total of 252 times from 79 distinct sources. 74.7.241.11 was first reported on November 19th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-21 23:20:53 (8 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 mnsf	2026-06-20 20:05:28 (1 day ago)	Abuse Detected (3)	Brute-Force Web App Attack
🇬🇧 NotCool	2026-06-19 17:30:04 (2 days ago)	(PERMBLOCK) 74.7.241.11 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs	Brute-Force
🇬🇧 NotCool	2026-06-19 06:01:22 (3 days ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.241.11 (US/United States/-): 50 in the last 3600 ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.241.11 (US/United States/-): 50 in the last 3600 secs show less	Bad Web Bot
🇪🇸 librebit	2026-06-19 03:22:13 (3 days ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-06-18 06:54:56 (4 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-18 05:12:17 (4 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 afleventoffice.com.au	2026-06-17 13:13:18 (4 days ago)	GET /js/%url% HTTP/1.1	Web App Attack
🇫🇷 pm33	2026-06-16 22:04:06 (5 days ago)	Unauthorized connections HTTP 401	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 15:44:33 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:44:27.611888 2026] [security2:error] [pid 5374:tid 5374] [client 74.7.241.11:49954] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|noisepie.com\|F\|2"] [data ".bat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "noisepie.com"] [uri "/video/tcow96.bat"] [unique_id "ai7MW_1FB7spYapShjevGAAAABE"], referer: http://noisepie.com/Misc.htm show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 21:44:11 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 17:44:03.045881 2026] [security2:error] [pid 8632:tid 8632] [client 74.7.241.11:56426] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.schlegelcreative.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.schlegelcreative.com"] [uri "/newsite/wp-json/wp/v2/users/1"] [unique_id "aix9o5udWzczU2mPwyExCQAAAAM"], referer: https://www.schlegelcreative.com/newsite/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Skyrider	2026-06-12 17:52:11 (1 week ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 17:02:33 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.241.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:02:28.885310 2026] [security2:error] [pid 16579:tid 16579] [client 74.7.241.11:48640] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ctrussell.grabnerconsulting.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ctrussell.grabnerconsulting.com"] [uri "/search/sql/tables.sql"] [unique_id "aiw7pM04cMxVxNS3YorEpAAAABQ"], referer: https://ctrussell.grabnerconsulting.com/search/sql/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-12 12:56:37 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.11 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇧🇪 cmbplf	2026-06-11 22:08:59 (1 week ago)	9.805 requests from abuseipdb.com blacklisted IP (1yr5mos3w)	Brute-Force Bad Web Bot

Showing 1 to 15 of 252 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:c1f::121

🇸🇪 65.99.181.123

🇫🇷 5.196.106.17

🇵🇱 194.180.49.104

🇫🇷 185.177.72.49

🇻🇳 171.231.180.249

🇺🇸 130.131.161.17

🇨🇳 124.174.36.222

🇨🇳 121.40.231.19

🇨🇳 118.81.207.181

🇨🇳 112.6.11.184

🇨🇦 99.235.87.46

🇳🇱 94.102.49.155

🇳🇱 91.92.40.50

🇩🇪 49.12.215.225

🇫🇷 45.81.243.62

🇮🇳 27.6.156.126

🇹🇳 197.2.246.150

🇲🇽 187.150.64.239

🇺🇸 165.154.173.169