JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.217

74.7.243.217 was found in our database!

This IP was reported 239 times. Confidence of Abuse is 83%: ?

83%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.217

Whois 74.7.243.217

IP Abuse Reports for 74.7.243.217:

This IP address has been reported a total of 239 times from 76 distinct sources. 74.7.243.217 was first reported on November 19th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-07-18 16:17:24 (5 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇳🇱 Site.eu	2026-07-18 11:08:53 (11 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 mail.avx.gr	2026-07-18 05:34:43 (16 hours ago)	Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 74.7.243.217 - - [18/Jul/2026:08:34:42 +0300] "G ... show more Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 74.7.243.217 - - [18/Jul/2026:08:34:42 +0300] "GET / HTTP/1.1" 200 7011 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-18 03:11:22 (19 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.217 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.217 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 Charlesiv	2026-07-18 02:28:01 (19 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-18T01:10:28Z Ray ID: a1cd9b5c998b1799 UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
Anonymous	2026-07-18 01:37:02 (20 hours ago)	Malicious activity detected	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-16 20:22:30 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Dorian GRANDHAY	2026-07-16 02:45:11 (2 days ago)	(PERMBLOCK) 74.7.243.217 (US/United States/-) has had more than 4 temp blocks in the last 604800 sec ... show more (PERMBLOCK) 74.7.243.217 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇳🇱 Site.eu	2026-07-15 19:14:21 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Skyrider	2026-07-15 12:17:18 (3 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 13:27:52 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.243.217 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 74.7.243.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 09:27:49.040749 2026] [security2:error] [pid 31592:tid 31592] [client 74.7.243.217:53882] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|infodevman.net\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "infodevman.net"] [uri "/Archives/CU67covid/[email protected]"] [unique_id "alOWVW6uUJ4EI8KZYaajyAAAAA4"], referer: https://infodevman.net/Archives/CU67covid/CU_Covid.html show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-12 11:32:33 (6 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.217 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.217 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-12 05:15:40 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.243.217 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.243.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 01:15:34.801247 2026] [security2:error] [pid 16278:tid 16278] [client 74.7.243.217:58338] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.maprada92.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.maprada92.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "alMi9tI_8aiSaPVzQUUrxwAAAAU"], referer: https://www.maprada92.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Dorian GRANDHAY	2026-07-11 18:47:59 (1 week ago)	(PERMBLOCK) 74.7.243.217 (US/United States/-) has had more than 4 temp blocks in the last 604800 sec ... show more (PERMBLOCK) 74.7.243.217 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 Skyrider	2026-07-10 22:23:29 (1 week ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.10.61

🇨🇳 210.22.149.155

🇨🇭 209.99.191.19

🇨🇴 186.118.219.202

🇺🇸 147.185.132.88

🇷🇴 80.94.92.179

🇱🇺 64.89.161.91

🇳🇱 2001:67c:e60:c0c:192:42:116:52

🇩🇪 194.164.201.92

🇹🇭 183.88.226.97

🇨🇳 180.76.194.91

🇺🇸 147.185.132.241

🇩🇪 140.248.75.122

🇬🇧 89.37.172.134

🇺🇿 84.54.73.3

🇧🇷 20.226.26.5

🇮🇳 203.192.227.103

🇭🇰 199.45.155.75

🇹🇼 198.235.24.98

🇩🇪 185.242.3.195