JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.28

74.7.242.28 was found in our database!

This IP was reported 243 times. Confidence of Abuse is 61%: ?

61%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.28

Whois 74.7.242.28

IP Abuse Reports for 74.7.242.28:

This IP address has been reported a total of 243 times from 81 distinct sources. 74.7.242.28 was first reported on November 19th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-19 16:07:53 (6 hours ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇪🇸 masterguru	2026-06-19 14:37:06 (7 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122 ... show more BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 Lino Project	2026-06-19 05:56:10 (16 hours ago)	74.7.242.28 - - [19/Jun/2026:07:56:03 +0200] "GET /index.php?action=plugins&module=CorePluginsAdmin ... show more 74.7.242.28 - - [19/Jun/2026:07:56:03 +0200] "GET /index.php?action=plugins&module=CorePluginsAdmin HTTP/1.1" 403 159447 "https://stats.stefanolazzaro.ovh/index.php?action=getUmdJs&cb=0779477e5376f5e6484df27c0cab9b10&chunk=1&module=Proxy" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.28 - - [19/Jun/2026:07:56:07 +0200] "GET /index.php?action=userSecurity&module=UsersManager HTTP/1.1" 403 68900 "https://stats.stefanolazzaro.ovh/index.php?action=getUmdJs&cb=0779477e5376f5e6484df27c0cab9b10&chunk=0&module=Proxy" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-06-18 06:51:39 (1 day ago)	74.7.242.28 - - [18/Jun/2026:16:49:07 +1000] "GET /?target=network.bitcoin HTTP/2.0" 200 8474 "https ... show more 74.7.242.28 - - [18/Jun/2026:16:49:07 +1000] "GET /?target=network.bitcoin HTTP/2.0" 200 8474 "https://smokeping.luisaranguren.com/?target=network" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.28 - - [18/Jun/2026:16:49:27 +1000] "GET /?target=network.bitcoin_abc HTTP/2.0" 200 8508 "https://smokeping.luisaranguren.com/?target=network" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.242.28 - - [18/Jun/2026:16:51:38 +1000] "GET /?displaymode=n;start=2026-06-18%2013:49;end=now;target=network.bitcoin HTTP/2.0" 200 8542 "https://smokeping.luisaranguren.com/?target=network.bitcoin" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-18 05:03:13 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-12 12:55:43 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 pscriptos	2026-06-09 15:21:31 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 pscriptos	2026-06-06 05:13:41 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-05 20:45:32 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 74.7.242.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.242.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:45:29.054770 2026] [security2:error] [pid 28626:tid 28626] [client 74.7.242.28:56414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bridgital.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bridgital.com"] [uri "/NewBridgitalWebsite/wp-json/wp/v2/users/1"] [unique_id "aiM1aXTF7-qWNJgnNi8ZMwAAAAw"], referer: https://www.bridgital.com/NewBridgitalWebsite/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-06-05 01:50:33 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 Site.eu	2026-06-04 12:50:03 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-03 17:52:00 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-06-02 10:31:15 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-05-30 22:20:14 (2 weeks ago)	[Tue May 26 04:16:03.424180 2026] [authz_core:error] [pid 119271:tid 139787180901952] [client 74.7.2 ... show more [Tue May 26 04:16:03.424180 2026] [authz_core:error] [pid 119271:tid 139787180901952] [client 74.7.242.28:39560] AH01630: client denied by server configuration: /var/www/horde/ [Thu May 28 08:30:53.956781 2026] [authz_core:error] [pid 205444:tid 139786962691648] [client 74.7.242.28:37964] AH01630: client denied by server configuration: /var/www/horde/ [Sat May 30 16:20:14.499248 2026] [authz_core:error] [pid 298919:tid 139786903942720] [client 74.7.242.28:58672] AH01630: client denied by server configuration: /var/www/horde/ ... show less	Bad Web Bot
🇫🇷 masterguru	2026-05-29 01:56:34 (3 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.28 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 243 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇳🇴 85.19.195.12

🇸🇪 45.84.107.172

🇩🇪 8.211.42.24

🇫🇷 2001:41d0:303:1456::1

🇧🇪 198.235.24.162

🇫🇷 194.163.181.75

🇨🇳 111.61.176.245

🇮🇷 79.127.94.78

🇳🇱 45.148.10.152

🇧🇷 201.22.37.110

🇳🇱 176.65.149.182

🇵🇱 172.253.13.215

🇮🇳 103.180.212.135

🇺🇸 66.132.195.61

🇵🇱 46.248.167.103

🇳🇱 45.66.35.32

🇳🇱 45.66.35.22

🇰🇷 211.217.203.165

🇺🇸 198.62.7.116