JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.1

74.7.242.1 was found in our database!

This IP was reported 269 times. Confidence of Abuse is 65%: ?

65%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.1

Whois 74.7.242.1

IP Abuse Reports for 74.7.242.1:

This IP address has been reported a total of 269 times from 75 distinct sources. 74.7.242.1 was first reported on November 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-08 05:20:15 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-06 20:45:06 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 16:44:57.275908 2026] [security2:error] [pid 31074:tid 31074] [client 74.7.242.1:39896] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.495metro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.495metro.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiSGyfZZeXkvK013K1sEUQAAAAY"], referer: https://www.495metro.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-06 07:03:32 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Jimbo67	2026-06-05 05:51:41 (4 days ago)	CrowdSec: crowdsecurity/http-probing [US] (MICROSOFT-CORP-MSN-AS-BLOCK)	Bad Web Bot
🇩🇪 Viveronese	2026-06-04 06:41:23 (5 days ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 Charlesiv	2026-06-04 06:00:48 (5 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-06-04T05:51:47Z Ray ID: a064aaf43c3144de UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇫🇷 masterguru	2026-06-04 04:13:14 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-03 17:51:29 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-06-01 15:26:44 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-01 05:11:25 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇳🇱 Site.eu	2026-05-31 13:18:25 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-05-30 16:11:09 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-29 17:29:01 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-29 00:52:24 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.1 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇳🇱 Site.eu	2026-05-27 13:58:39 (1 week ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.196.165.83

🇨🇳 125.91.33.72

🇺🇸 20.64.104.70

🇺🇸 209.141.47.217

🇺🇸 66.132.186.140

🇺🇸 43.135.135.17

🇸🇬 128.199.225.7

🇰🇷 116.42.157.25

🇨🇳 116.24.231.223

🇳🇵 103.166.101.74

🇧🇩 103.147.167.166

🇧🇩 103.91.128.49

🇱🇹 45.227.254.170

🇧🇩 36.50.179.37

🇨🇳 221.197.97.53

🇩🇪 213.209.159.238

🇨🇳 183.221.20.144

🇸🇬 152.42.219.80

🇻🇳 115.84.183.240

🇮🇩 103.141.108.240