JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.40

74.7.242.40 was found in our database!

This IP was reported 283 times. Confidence of Abuse is 90%: ?

90%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.40

Whois 74.7.242.40

IP Abuse Reports for 74.7.242.40:

This IP address has been reported a total of 283 times from 86 distinct sources. 74.7.242.40 was first reported on November 19th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-10 12:18:58 (9 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 zulzeen	2026-07-09 05:03:27 (1 day ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Web Attack)	Hacking Web App Attack
🇺🇸 LotPhantom	2026-07-09 04:35:57 (1 day ago)	74.7.242.40 - - [09/Jul/2026:04:34:57 +0000] "GET / HTTP/2.0" 200 577 "-" "Mozilla/5.0 AppleWebKit/5 ... show more 74.7.242.40 - - [09/Jul/2026:04:34:57 +0000] "GET / HTTP/2.0" 200 577 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "0" ... show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-08 20:04:59 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 16:04:53.674400 2026] [security2:error] [pid 17403:tid 17403] [client 74.7.242.40:38058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|adoniahenterprises.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adoniahenterprises.com"] [uri "/php-error.log"] [unique_id "ak6tZT-nI5hVzlb9h0POKwAAAAM"], referer: https://adoniahenterprises.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-07 04:35:22 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 Charlesiv	2026-07-07 04:00:10 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-07T03:37:19Z Ray ID: a173cf57dc529151 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇫🇷 masterguru	2026-07-05 05:37:57 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇨🇭 4server	2026-07-04 20:43:10 (6 days ago)	[SatJul0422:43:06.7410142026][security2:error][pid4030035:tid4031266][client74.7.242.40:0]ModSecurit ... show more [SatJul0422:43:06.7410142026][security2:error][pid4030035:tid4031266][client74.7.242.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).detectedSQLiusinglibinjectionwithfingerprint\'sos\'[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"114\"][id\"341245\"][rev\"73\"][msg\"Atomicorp.comWAFRules:SQLinjectionattack\(detectSQLi\)\"][data\"sos\,REQUEST_HEADERS:Referer\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.support-ticino.ch\"][uri\"/wp-content/themes/seosight/js/ o.source.mp4 \"][unique_id\"aklwWn_cgp-j0BSjLLfHCQAAAVM\"]\,referer:https://www.support-ticino.ch/wp-content/themes/seosight/js/\' o.source.mp4 \' show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-01 21:26:42 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Charlesiv	2026-07-01 02:02:40 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-01T01:36:18Z Ray ID: a141add59f27b03e UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇺🇸 Charlesiv	2026-06-26 18:21:32 (2 weeks ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-06-26T16:46:40Z Ray ID: a11db08138605660 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-26 09:27:24 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-26 08:22:56 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.40 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Vegascosmetics	2026-06-25 11:04:06 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 4server	2026-06-25 10:49:56 (2 weeks ago)	[ThuJun2512:49:53.2189242026][security2:error][pid1542828:tid1542992][client74.7.242.40:0]ModSecurit ... show more [ThuJun2512:49:53.2189242026][security2:error][pid1542828:tid1542992][client74.7.242.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\(\\\\\\\\w \)\(\?:user\\|and\)\(\\\\\\\\w \)char\?\\\\\\\\\([0-9]\\|\(\?:execute\\|convert\)\?\\\\\\\\\(.{1\,300}\\\\\\\\\)\\|\;\?delete.{1\,200}\;\?\(\?:insert\\|declare\\|varchar\)\?\\|\\\\\\\\b\(\?:drop\\|create\)\\\\\\\\b\(\\\\\\\\w \)table\\|\(\?:declare\\|convert\).{1\,200}varchar\\\\\\\\\(\\|null\?\,\?null\?\,\?\(accesslevel\\|user_\?name\)\?\,\\|conc...\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"153\"][id\"360148\"][rev\"7\"][msg\"Atomicorp.comWAFRules:AdvancedSQLevasionprotection\"][data\"concat\(\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.hopitalprovidence.org\"][uri\"/\\\\\"\\\\\".concat\(thisClass.urlEncode\(image.src\\|\\|image.thumb\\|\\|\'\'\)\,\\\\\"/\\\\\"\"][unique_id\"aj0H0XdkUeppgVCMK3ZSMwAAAEo\"]\,referer:https://www.hopitalprovidence.org/js/a18f0630b3880053e66a18df388e1ca8-bundle.js\?ts=2024042416510 show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 283 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.6

🇮🇷 85.133.169.67

🇭🇰 199.45.154.180

🇺🇸 147.185.132.89

🇨🇳 117.95.60.73

🇳🇱 86.54.31.32

🇮🇪 52.211.53.238

🇺🇸 162.216.150.82

🇮🇳 143.110.247.221

🇺🇸 104.210.140.132

🇹🇷 94.154.43.181

🇧🇷 201.32.221.45

🇺🇸 162.240.222.44

🇱🇺 64.89.161.91

🇲🇽 189.190.244.176

🇷🇴 188.241.222.89

🇺🇸 172.191.239.155

🇩🇪 135.125.226.120

🇳🇱 45.148.10.152

🇺🇸 44.56.156.113