JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.242.46

74.7.242.46 was found in our database!

This IP was reported 252 times. Confidence of Abuse is 87%: ?

87%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.242.46

Whois 74.7.242.46

IP Abuse Reports for 74.7.242.46:

This IP address has been reported a total of 252 times from 83 distinct sources. 74.7.242.46 was first reported on November 20th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-22 14:41:32 (5 hours ago)	Brute force	Brute-Force
🇳🇱 Site.eu	2026-07-22 10:58:58 (9 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 000rosiu	2026-07-21 17:07:28 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoin ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-21 14:41:07 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 Charlesiv	2026-07-21 12:01:47 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-21T11:28:19Z Ray ID: a1e9dc87fe69bcdd UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-21 11:40:19 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 07:40:11.830898 2026] [security2:error] [pid 8593:tid 8593] [client 74.7.242.46:35140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.asbechiro.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.asbechiro.com"] [uri "/yahoo.com"] [unique_id "al9am2ZdIP8uxoNvW9W_4gAAAA0"], referer: http://www.asbechiro.com/3.html show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-21 10:13:11 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.46 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.242.46 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-07-21 03:33:14 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 etu brutus	2026-07-21 03:20:59 (1 day ago)	74.7.242.46 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-07-20 11:51:03 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:50:56.133594 2026] [security2:error] [pid 28112:tid 28112] [client 74.7.242.46:46456] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pswebsite.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/goggle.com"] [unique_id "al4LoAdz-7kA5F3s-858owAAAAM"], referer: http://pswebsite.com/answers.htm show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-20 01:06:46 (2 days ago)	Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 74.7.242.46 - - [20/Jul/2026:04:06:45 +0300] "GE ... show more Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 74.7.242.46 - - [20/Jul/2026:04:06:45 +0300] "GET /sitemap_index.xml HTTP/1.1" 200 5839 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-18 15:59:34 (4 days ago)	[da.kdns.gr] httpd-volume-flood: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.lo ... show more [da.kdns.gr] httpd-volume-flood: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; samples=reason=high volume + broad scan: 310 reqs (>= 240), 293 distinct dynamic URIs (>= 60) \| / \| /wp-content/themes/fooding/assets/css/font-awesome.min.css?ver=4.7 show less	Hacking Web App Attack
🇫🇷 mrcrassi	2026-07-18 12:11:07 (4 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-18 11:51:12 (4 days ago)	(mod_security) mod_security (id:212290) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:212290) triggered by 74.7.242.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 07:51:08.364476 2026] [security2:error] [pid 7268:tid 7268] [client 74.7.242.46:38540] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:href\|src\|lowsrc\|url)\\\\b\\\\W+?\\\\b(?:(?:vb\|java)script\|shell)(?::\|&colon)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "47"] [id "212290"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.jenricker.com\|F\|2"] [data "Matched Data: href \|\| '') ? 'javascript: found within REQUEST_URI: /js/' (/^https/i.test(window.location.href \|\| '') ? 'javascript:void(false)' : 'about:blank' ) '"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.jenricker.com"] [uri "/js/' + (/^https/i.test(window.location.href \|\| '') "] [unique_id "altorBysJH0LDhktUi7gTQAAAAI"], referer: https://www.jenricker.com/js/jquery.fancybox-1.3.4.js show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 juguemosalacarioca.com	2026-07-18 07:43:43 (4 days ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack

Showing 1 to 15 of 252 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 136.248.121.226

🇫🇷 91.231.89.253

🇫🇷 91.231.89.104

🇩🇪 213.209.159.26

🇺🇸 172.203.245.192

🇺🇸 165.154.162.212

🇫🇷 91.196.152.104

🇫🇷 91.196.152.18

🇺🇸 65.49.1.222

🇹🇼 198.235.24.57

🇮🇩 103.118.82.254

🇨🇿 78.44.192.210

🇦🇺 45.134.20.141

🇺🇸 45.33.16.187

🇺🇸 3.129.187.38

🇵🇰 203.135.42.52

🇺🇬 196.0.3.188

🇦🇷 186.56.11.2

🇸🇬 165.154.236.104

🇯🇵 160.251.139.91