JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.241.42

74.7.241.42 was found in our database!

This IP was reported 255 times. Confidence of Abuse is 90%: ?

90%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.241.42

Whois 74.7.241.42

IP Abuse Reports for 74.7.241.42:

This IP address has been reported a total of 255 times from 89 distinct sources. 74.7.241.42 was first reported on February 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-06-08 04:32:19 (1 day ago)	Many_bad_calls	Web App Attack
🇩🇪 Philister11	2026-06-08 00:27:51 (2 days ago)	CrowdSec: crowdsecurity/http-probing (US/AS8075)	Web App Attack Hacking
🇩🇪 Philister11	2026-06-06 01:00:06 (4 days ago)	CrowdSec: crowdsecurity/http-probing (US/AS8075)	Web App Attack Hacking
🇩🇪 Philister11	2026-06-05 00:35:25 (5 days ago)	CrowdSec: crowdsecurity/http-probing (US/AS8075)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-04 22:29:09 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.42 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 18:29:05.166161 2026] [security2:error] [pid 21152:tid 21152] [client 74.7.241.42:38280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hydrometal-js.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hydrometal-js.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aiH8MelqRGmFbFsLd7jkvgAAABE"], referer: http://hydrometal-js.com/author/hydrometal/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kimax	2026-06-04 16:38:51 (5 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-06-04 02:02:21 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.241.42 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.241.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 22:02:15.348628 2026] [security2:error] [pid 14545:tid 14545] [client 74.7.241.42:38122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.microkerneltechnologies.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.microkerneltechnologies.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiDcp3-6F_SXUumtmc9svQAAABs"], referer: https://www.microkerneltechnologies.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 dispensight	2026-06-03 19:30:34 (6 days ago)	Automated web scanner: 1 GET request to help.dispensight.cloud. Paths: /. UA: Mozilla/5.0 AppleWebKi ... show more Automated web scanner: 1 GET request to help.dispensight.cloud. Paths: /. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot). Microsoft Corporation (Atlanta, United States). show less	Bad Web Bot
🇫🇷 masterguru	2026-06-03 17:57:03 (6 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-01 04:58:39 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 Dorian GRANDHAY	2026-05-31 14:03:35 (1 week ago)	(PERMBLOCK) 74.7.241.42 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs ... show more (PERMBLOCK) 74.7.241.42 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇧🇪 cmbplf	2026-05-31 08:06:58 (1 week ago)	2.214 requests from abuseipdb.com blacklisted IP (1yr9mos2w)	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-05-30 16:10:37 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-29 16:13:45 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.241.42 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 Hazzard	2026-05-28 11:58:13 (1 week ago)	(php-url-fopen) Failed php-url-fopen trigger from 74.7.241.42 (US/United States/Georgia/Atlanta/-/[r ... show more (php-url-fopen) Failed php-url-fopen trigger from 74.7.241.42 (US/United States/Georgia/Atlanta/-/[redacted]): (CF_ENABLE) show less	Web App Attack

Showing 1 to 15 of 255 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.111.156.245

🇸🇬 162.158.190.48

🇨🇳 120.48.199.28

🇦🇹 104.23.162.72

🇵🇰 103.26.82.86

🇺🇸 45.80.107.147

🇰🇷 43.164.190.64

🇧🇷 34.151.248.221

🇨🇳 14.103.127.231

🇮🇩 2406:da19:776:6e01:7a75:b434:c7b2:ade3

🇺🇸 216.73.216.186

🇺🇸 170.130.204.82

🇭🇰 165.154.60.76

🇻🇳 160.187.240.90

🇨🇭 144.2.91.96

🇺🇸 135.119.88.100

🇫🇮 91.247.163.77

🇭🇺 79.122.55.140

🇺🇸 45.132.115.248

🇨🇳 39.96.220.52