JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.241.14

74.7.241.14 was found in our database!

This IP was reported 250 times. Confidence of Abuse is 81%: ?

81%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.241.14

Whois 74.7.241.14

IP Abuse Reports for 74.7.241.14:

This IP address has been reported a total of 250 times from 77 distinct sources. 74.7.241.14 was first reported on November 19th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-22 01:07:34 (16 hours ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-196)	Hacking
🇳🇱 Site.eu	2026-06-21 20:54:17 (20 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 mnsf	2026-06-19 19:06:30 (2 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇪🇸 librebit	2026-06-19 16:54:41 (3 days ago)	Brute force	Brute-Force
🇬🇧 pinguin	2026-06-18 03:35:59 (4 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-18 02:56:40 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 webehostin.com	2026-06-17 06:33:12 (5 days ago)	Too Many Connections Or General Abuse	Brute-Force DDoS Attack
🇩🇪 Vegascosmetics	2026-06-12 20:45:53 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 4server	2026-06-12 19:45:05 (1 week ago)	[FriJun1221:45:01.0137072026][security2:error][pid7969:tid8122][client74.7.241.14:0]ModSecurity:Acce ... show more [FriJun1221:45:01.0137072026][security2:error][pid7969:tid8122][client74.7.241.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\\\\\\\\w \)\(\?:user\\|and\)\(\\\\\\\\w \)char\?\\\\\\\\\([0-9]\\|\(\?:execute\\|convert\)\?\\\\\\\\\(.{1\,300}\\\\\\\\\)\\|\;\?delete.{1\,200}\;\?\(\?:insert\\|declare\\|varchar\)\?\\|\\\\\\\\b\(\?:drop\\|create\)\\\\\\\\b\(\\\\\\\\w \)table\\|\(\?:declare\\|convert\).{1\,200}varchar\\\\\\\\\(\\|null\?\,\?null\?\,\?\(accesslevel\\|user_\?name\)\?\,\\|conc...\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"153\"][id\"360148\"][rev\"7\"][msg\"Atomicorp.comWAFRules:AdvancedSQLevasionprotection\"][data\"concat\(\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.hopitalprovidence.org.136-243-54-122.cpanel.site\"][uri\"/\\\\\"\\\\\".concat\(thisClass.urlEncode\(image.src\\|\\|image.thumb\\|\\|\'\'\)\,\\\\\"/\\\\\"\"][unique_id\"aixhvWMLR_5kjJVxgN7oigAAARY\"]\,referer:https://www.hopitalprovidence.org.136-243-54-122.cpanel.site/js/a18f04c9b30b show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-06-12 13:14:57 (1 week ago)	[FriJun1215:14:50.1310482026][security2:error][pid269639:tid270959][client74.7.241.14:0]ModSecurity: ... show more [FriJun1215:14:50.1310482026][security2:error][pid269639:tid270959][client74.7.241.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\\\\\\\\w \)\(\?:user\\|and\)\(\\\\\\\\w \)char\?\\\\\\\\\([0-9]\\|\(\?:execute\\|convert\)\?\\\\\\\\\(.{1\,300}\\\\\\\\\)\\|\;\?delete.{1\,200}\;\?\(\?:insert\\|declare\\|varchar\)\?\\|\\\\\\\\b\(\?:drop\\|create\)\\\\\\\\b\(\\\\\\\\w \)table\\|\(\?:declare\\|convert\).{1\,200}varchar\\\\\\\\\(\\|null\?\,\?null\?\,\?\(accesslevel\\|user_\?name\)\?\,\\|conc...\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"153\"][id\"360148\"][rev\"7\"][msg\"Atomicorp.comWAFRules:AdvancedSQLevasionprotection\"][data\"concat\(\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.sesael.ch.81-17-25-250.cpanel.site\"][uri\"/\\\\\"\\\\\".concat\(thisClass.urlEncode\(image.src\\|\\|image.thumb\\|\\|\'\'\)\,\\\\\"/\\\\\"\"][unique_id\"aiwGStmsFpfgPcm3W2dl7QAAAEs\"]\,referer:https://www.sesael.ch.81-17-25-250.cpanel.site/js/a18fc3ab8a960146b8614fa245422add-bun show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 12:16:59 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:16:52.544549 2026] [security2:error] [pid 26020:tid 26020] [client 74.7.241.14:42752] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.andrewrmarshall.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.andrewrmarshall.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aiv4tANh1FAmwGiHnQ4OqwAAAAY"], referer: https://civilwarzone.andrewrmarshall.com/WeAreComingFatherAbram.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 11:35:18 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:35:14.323983 2026] [security2:error] [pid 16033:tid 16033] [client 74.7.241.14:37488] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|firebelly.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firebelly.org"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aivu8qTaUw7mVQP3ySjmrQAAAAA"], referer: https://firebelly.org/author/andrea/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-12 11:27:05 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.14 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.14 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-10 05:41:57 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:41:49.280973 2026] [security2:error] [pid 1362:tid 1362] [client 74.7.241.14:45718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.cassialifesci.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cassialifesci.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aij5Hbx1peOAJ9w4js1oJQAAAA8"], referer: https://www.cassialifesci.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 14:57:35 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:57:31.525919 2026] [security2:error] [pid 21892:tid 21914] [client 74.7.241.14:49864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dejacats.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dejacats.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aigp29WcSEvW3IpD4vdyQwAAABA"], referer: http://dejacats.com/author/admin-2-2/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 250 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.145.126

🇲🇽 201.174.107.12

🇺🇸 162.216.149.236

🇻🇳 113.188.119.50

🇺🇸 37.19.198.244

🇮🇩 163.7.9.84

🇨🇳 116.228.195.251

🇺🇸 104.152.52.115

🇫🇷 85.217.140.37

🇺🇸 66.132.224.237

🇺🇸 50.217.255.171

🇫🇷 45.154.138.210

🇫🇷 45.154.138.184

🇳🇱 45.128.199.52

🇺🇸 216.73.160.118

🇺🇸 184.105.139.79

🇩🇪 178.105.131.140

🇺🇸 162.216.149.51

🇨🇳 113.194.203.31

🇨🇳 112.95.208.154