JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.212

74.7.243.212 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 18%: ?

18%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.212

Whois 74.7.243.212

IP Abuse Reports for 74.7.243.212:

This IP address has been reported a total of 224 times from 73 distinct sources. 74.7.243.212 was first reported on November 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-07-01 18:36:27 (2 weeks ago)	6 incidents: malicious activity. First: 2026-06-18 20:30, Last: 2026-07-01 14:36 UTC. Triggers: ufw- ... show more 6 incidents: malicious activity. First: 2026-06-18 20:30, Last: 2026-07-01 14:36 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-29 20:39:27 (2 weeks ago)	9 incidents: malicious activity. First: 2026-05-07 14:30, Last: 2026-06-29 16:39 UTC. Triggers: ufw- ... show more 9 incidents: malicious activity. First: 2026-05-07 14:30, Last: 2026-06-29 16:39 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-11 23:31:23 (1 month ago)	13 incidents: web scanning/attack. First: 2026-04-24 07:06, Last: 2026-06-11 19:31 UTC. Triggers: uf ... show more 13 incidents: web scanning/attack. First: 2026-04-24 07:06, Last: 2026-06-11 19:31 UTC. Triggers: ufw-repeater,nginx-badbots,ufw-repeater. show less	Port Scan Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-25 07:13:12 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 GabrielJST	2026-05-21 18:35:12 (1 month ago)	(php-url-fopen) Failed php-url-fopen trigger from 74.7.243.212 (US/United States/-): (CF_ENABLE)	Web App Attack
🇩🇪 Vegascosmetics	2026-05-20 21:52:49 (1 month ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇩🇪 4server	2026-05-19 08:23:05 (1 month ago)	[TueMay1910:23:02.9746652026][security2:error][pid2553966:tid2553981][client74.7.243.212:0]ModSecuri ... show more [TueMay1910:23:02.9746652026][security2:error][pid2553966:tid2553981][client74.7.243.212:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.your-team.ch\"][uri\"/xmlrpc.php\"][unique_id\"agwd5nm9m-oQ0PZGAgRQjgAAAAQ\"]\,referer:http://www.your-team.ch/eventi/ show less	Port Scan Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-17 17:32:08 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-05-15 13:29:03 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.212 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.212 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 4server	2026-05-12 22:54:14 (2 months ago)	[WedMay1300:54:08.4330522026][security2:error][pid719301:tid719362][client74.7.243.212:0]ModSecurity ... show more [WedMay1300:54:08.4330522026][security2:error][pid719301:tid719362][client74.7.243.212:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.your-team.ch\"][uri\"/xmlrpc.php\"][unique_id\"agOvkG0vjMM2Jd2ZPgliXQAAAFg\"]\,referer:https://www.your-team.ch/ show less	Port Scan Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-12 17:59:46 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-05-12 02:40:00 (2 months ago)	[TueMay1204:39:56.4710592026][security2:error][pid3516857:tid3516889][client74.7.243.212:0]ModSecuri ... show more [TueMay1204:39:56.4710592026][security2:error][pid3516857:tid3516889][client74.7.243.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).detectedSQLiusinglibinjectionwithfingerprint\'sos\'[file\"/etc/apache2/conf.d/modsec_rules/11_asl_adv_rules.conf\"][line\"114\"][id\"341245\"][rev\"73\"][msg\"Atomicorp.comWAFRules:SQLinjectionattack\(detectSQLi\)\"][data\"sos\,REQUEST_HEADERS:Referer\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.simireinigung.ch\"][uri\"/wp-content/themes/soledad/js/ n \"][unique_id\"agKS_PvJIhBHMDs_SautWQAAABU\"]\,referer:https://www.simireinigung.ch/wp-content/themes/soledad/js/\' n \' show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-11 19:52:52 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.243.212 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.243.212 (US/United States/-) show less	Bad Web Bot
🇳🇱 Site.eu	2026-05-11 08:13:24 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-05-10 16:22:17 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.212 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.212 (US/United States/-): 2 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 191.98.196.14

🇧🇷 186.213.158.226

🇮🇳 185.100.212.141

🇨🇳 117.72.120.178

🇨🇳 106.12.29.184

🇷🇺 93.171.218.21

🇫🇷 91.196.152.240

🇫🇷 85.217.140.30

🇧🇪 34.79.48.114

🇻🇳 14.225.217.138

🇺🇸 178.93.46.212

🇻🇳 171.243.151.51

🇺🇸 162.216.149.39

🇯🇵 120.51.38.55

🇳🇱 91.92.40.231

🇳🇱 45.156.87.204

🇰🇷 39.117.79.36

🇺🇸 38.60.157.37

🇬🇧 35.203.210.200

🇬🇧 35.203.210.15