JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.235

74.7.243.235 was found in our database!

This IP was reported 246 times. Confidence of Abuse is 98%: ?

98%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.235

Whois 74.7.243.235

IP Abuse Reports for 74.7.243.235:

This IP address has been reported a total of 246 times from 71 distinct sources. 74.7.243.235 was first reported on November 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 pinguin	2026-06-12 17:11:11 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-06-12 11:14:56 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.235 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.235 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-06-12 10:59:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /wp-content/uploads/uag-plugin/assets/1000/uag-css-1328. ... show more Bot / scanning and/or hacking attempts: GET /wp-content/uploads/uag-plugin/assets/1000/uag-css-1328.css, GET /wp-content/plugins/sureforms/assets/css/minified/blocks/de, GET /wp-content/plugins/sureforms/assets/css/minified/common.mi, GET /wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fkino, GET /wp-content/uploads/uag-plugin/assets/3000/uag-css-2801.css, GET /wp-content/themes/astra/assets/css/minified/main.min.css?v, GET /wp-content/plugins/sureforms/assets/css/minified/deps/intl, GET /wp-json/wp/v2/categories/1 HTTP/2.0, GET /xmlrpc.php HTTP/2.0, GET /wp-content/uploads/uag-plugin/assets/1000/uag-css-1322.css, GET /wp-includes/js/comment-reply.min.js?ver=7.0 HTTP/2.0, GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/cs show less	Hacking Web App Attack
🇺🇸 c y	2026-06-12 10:17:14 (1 day ago)	Cmd Injection attack detected	SSH
Anonymous	2026-06-12 02:11:19 (2 days ago)	Malicious activity detected	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-11 21:37:36 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-11 16:08:15 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 74.7.243.235 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.243.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:08:10.509078 2026] [security2:error] [pid 16576:tid 16576] [client 74.7.243.235:59508] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.thorndikestudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thorndikestudio.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "airdap3C7MtzAhEl9JS-ZwAAAAg"], referer: http://www.thorndikestudio.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-10 01:44:00 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-06-08 04:41:46 (6 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 NotCool	2026-06-07 10:09:52 (6 days ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.243.235 (US/United States/-): 50 in the last 360 ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.243.235 (US/United States/-): 50 in the last 3600 secs show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-06 06:30:38 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-06-04 04:08:43 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.235 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.235 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-06-04 03:52:25 (1 week ago)	Reported from Nginx log analysis 6. Log: 74.7.243.235 - - [04/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1 ... show more Reported from Nginx log analysis 6. Log: 74.7.243.235 - - [04/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; https://openai.com/gptbot)" "-" "US United States Atlanta" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇺🇸 Charlesiv	2026-06-04 00:02:23 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corpora ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-06-03T23:05:13Z Ray ID: a0625761ca5b53cc UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 23:43:34 (1 week ago)	(mod_security) mod_security (id:240950) triggered by 74.7.243.235 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240950) triggered by 74.7.243.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:43:30.877674 2026] [security2:error] [pid 18594:tid 18594] [client 74.7.243.235:36120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.noelramos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.noelramos.com"] [uri "/wiki/index.php"] [unique_id "aiC8IhM-QHHr0f97Gk3YkAAAAAk"], referer: http://kurtstyles6.blogspot.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 246 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 165.232.101.75

🇫🇷 163.171.133.235

🇳🇱 85.11.167.118

🇺🇸 54.193.158.196

🇺🇸 216.25.89.142

🇩🇪 213.209.159.158

🇲🇽 187.236.74.99

🇺🇸 162.243.138.30

🇫🇮 147.185.133.67

🇧🇷 138.186.196.44

🇺🇸 98.90.43.197

🇬🇧 46.101.84.105

🇱🇹 45.227.254.170

🇬🇧 35.203.211.182

🇹🇼 35.194.132.250

🇦🇺 35.189.36.78

🇺🇸 24.144.113.209

🇵🇰 144.48.130.215

🇺🇸 128.241.26.243

🇳🇱 77.73.135.11