JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.22

74.7.242.22 was found in our database!

This IP was reported 239 times. Confidence of Abuse is 69%: ?

69%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.22

Whois 74.7.242.22

IP Abuse Reports for 74.7.242.22:

This IP address has been reported a total of 239 times from 81 distinct sources. 74.7.242.22 was first reported on November 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Dorian GRANDHAY	2026-06-05 18:27:34 (1 day ago)	(PERMBLOCK) 74.7.242.22 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs ... show more (PERMBLOCK) 74.7.242.22 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-04 02:56:34 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 22:56:28.638455 2026] [security2:error] [pid 13215:tid 13215] [client 74.7.242.22:50320] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.badgerkelley.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badgerkelley.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiDpXLi5DAIxv6aFTVemIgAAAAo"], referer: https://www.badgerkelley.com/author/admin show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-06-04 00:49:24 (3 days ago)	74.7.242.22 - - [04/Jun/2026:01:49:21 +0100] "GET / HTTP/1.1" 200 4056 "-" "Mozilla/5.0 AppleWebKit/ ... show more 74.7.242.22 - - [04/Jun/2026:01:49:21 +0100] "GET / HTTP/1.1" 200 4056 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Bad Web Bot
Anonymous	2026-05-31 00:11:05 (1 week ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-30 17:48:09 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122 ... show more BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 masterguru	2026-05-30 16:16:44 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-29 00:53:03 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-05-28 19:11:05 (1 week ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-28 15:37:05 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-27 13:45:58 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-26 06:23:13 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-26 00:02:21 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.22 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 MAGIC	2026-05-24 01:04:09 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-22 09:41:21 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 05:41:18.303655 2026] [security2:error] [pid 32155:tid 32155] [client 74.7.242.22:47844] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brickyardinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brickyardinn.com"] [uri "/mail to: [email protected]"] [unique_id "ahAkvvcdk7ujTTCDGb4pWgAAABo"], referer: http://brickyardinn.com/statement.htm show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 00:01:07 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.242.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 20:00:59.216906 2026] [security2:error] [pid 26731:tid 26754] [client 74.7.242.22:57914] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aafmorg.aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafmorg.aafm.us"] [uri "/http/charteredfinancialmanager.com"] [unique_id "ag-cu0Wgm8LeZPQIhwKHFgAAABU"], referer: https://www.aafmorg.aafm.us/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.174.22.19

🇦🇷 186.39.190.49

🇹🇷 131.222.249.214

🇪🇸 79.154.141.114

🇮🇷 217.26.222.55

🇺🇸 205.210.31.38

🇧🇴 200.105.172.184

🇭🇰 199.45.154.191

🇧🇿 190.197.105.47

🇺🇸 13.59.28.73

🇨🇳 120.48.152.13

🇰🇷 118.37.214.187

🇮🇹 88.147.30.59

🇷🇺 82.146.16.183

🇺🇸 73.192.125.170

🇸🇬 47.84.135.183

🇬🇧 45.82.76.119

🇨🇳 223.85.251.61

🇬🇧 193.163.125.131

🇨🇳 113.207.86.27