JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.0

74.7.242.0 was found in our database!

This IP was reported 232 times. Confidence of Abuse is 63%: ?

63%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.0

Whois 74.7.242.0

IP Abuse Reports for 74.7.242.0:

This IP address has been reported a total of 232 times from 78 distinct sources. 74.7.242.0 was first reported on November 19th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-21 02:17:34 (4 hours ago)	[SunJun2104:17:29.8123732026][security2:error][pid2082548:tid2082672][client74.7.242.0:0]ModSecurity ... show more [SunJun2104:17:29.8123732026][security2:error][pid2082548:tid2082672][client74.7.242.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).detectedSQLiusinglibinjectionwithfingerprint\'sos\'[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"114\"][id\"341245\"][rev\"73\"][msg\"Atomicorp.comWAFRules:SQLinjectionattack\(detectSQLi\)\"][data\"sos\,REQUEST_HEADERS:Referer\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.reddragonrecords.ch\"][uri\"/wp-content/themes/kentha/js/min/ c \"][unique_id\"ajdJuSWa24hCl2Bx4hEYIAAAANE\"]\,referer:https://www.reddragonrecords.ch/wp-content/themes/kentha/js/min/\' c \' show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-19 18:05:25 (1 day ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-19 01:26:46 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-18 07:07:15 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 2 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-18 04:57:36 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-06-12 21:08:24 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-12 17:30:10 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:30:01.288792 2026] [security2:error] [pid 24738:tid 24738] [client 74.7.242.0:55326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.enjoymycondos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.enjoymycondos.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aixCGV0WhKrEic6_L6kIMQAAAAg"], referer: https://www.enjoymycondos.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-12 15:15:54 (1 week ago)	[FriJun1217:15:52.1972382026][security2:error][pid3895349:tid3895363][client74.7.242.0:0]ModSecurity ... show more [FriJun1217:15:52.1972382026][security2:error][pid3895349:tid3895363][client74.7.242.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\\\\\\\\w \)\(\?:user\\|and\)\(\\\\\\\\w \)char\?\\\\\\\\\([0-9]\\|\(\?:execute\\|convert\)\?\\\\\\\\\(.{1\,300}\\\\\\\\\)\\|\;\?delete.{1\,200}\;\?\(\?:insert\\|declare\\|varchar\)\?\\|\\\\\\\\b\(\?:drop\\|create\)\\\\\\\\b\(\\\\\\\\w \)table\\|\(\?:declare\\|convert\).{1\,200}varchar\\\\\\\\\(\\|null\?\,\?null\?\,\?\(accesslevel\\|user_\?name\)\?\,\\|conc...\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"153\"][id\"360148\"][rev\"7\"][msg\"Atomicorp.comWAFRules:AdvancedSQLevasionprotection\"][data\"concat\(\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.eselectronic.ch.136-243-54-122.cpanel.site\"][uri\"/\\\\\"\\\\\".concat\(thisClass.urlEncode\(image.src\\|\\|image.thumb\\|\\|\'\'\)\,\\\\\"/\\\\\"\"][unique_id\"aiwiqFMwSjGOGiplqSeW6gAAAAM\"]\,referer:https://www.eselectronic.ch.136-243-54-122.cpanel.site/js/a188dda6924c0091f63 show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-12 11:00:00 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 MPL	2026-06-12 10:11:51 (1 week ago)	tcp/443 (8 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-09 23:24:49 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:24:45.352893 2026] [security2:error] [pid 8839:tid 8839] [client 74.7.242.0:35332] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bergenoaks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bergenoaks.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiigvTAk1tk82GUuL6mybAAAACA"], referer: http://www.bergenoaks.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 17:54:19 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 13:54:12.771470 2026] [security2:error] [pid 20279:tid 20279] [client 74.7.242.0:33168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|whiterapperz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whiterapperz.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiBqRGObP9i5r379B7jwEgAAAAo"], referer: https://whiterapperz.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-02 02:13:17 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.0 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-02 01:33:09 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 21:33:04.563797 2026] [security2:error] [pid 29075:tid 29075] [client 74.7.242.0:35388] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.wild-goose.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wild-goose.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ah4y0LdYkKwnUlbUPY4z1AAAABM"], referer: http://www.wild-goose.net/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-30 23:03:36 (3 weeks ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 232 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.26

🇺🇸 172.217.106.41

🇩🇿 154.243.127.63

🇭🇰 152.32.128.204

🇺🇸 136.61.225.60

🇳🇵 124.41.228.116

🇩🇪 47.87.130.39

🇺🇸 34.207.226.209

🇰🇷 220.127.148.6

🇮🇩 202.152.49.82

🇵🇦 200.46.1.191

🇺🇸 150.107.38.3

🇺🇸 147.185.132.237

🇨🇳 123.160.221.171

🇸🇬 114.119.153.208

🇩🇪 91.107.251.55

🇩🇪 45.135.193.193

🇳🇱 45.134.225.130

🇳🇱 45.8.17.144

🇺🇸 24.144.115.128