JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.243.239

74.7.243.239 was found in our database!

This IP was reported 433 times. Confidence of Abuse is 93%: ?

93%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.243.239

Whois 74.7.243.239

IP Abuse Reports for 74.7.243.239:

This IP address has been reported a total of 433 times from 88 distinct sources. 74.7.243.239 was first reported on November 19th 2025, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-08-23 23:05:54 (8 minutes ago)	5.107 requests from abuseipdb.com blacklisted IP (1mo1w1d)	Brute-Force Bad Web Bot
🇵🇱 Budyn	2026-08-22 18:35:41 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.goblinpot.tech \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-08-22 12:48:52 (1 day ago)	Brute force	Brute-Force
🇩🇪 jbcrn	2026-08-21 19:25:32 (2 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Request ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.fibrosarcoma-postnotum/unsubstantially-microcosmal/pelecan-humite/subscribe/bracteal/monocularity/Climatius-transtemporal/gravely/book/Tinne/Nandi-beshiver/merognathite-affidavit/lingtow-brewer/tag/dissolutely/burnut/coenurus/poculent-unsupreme/Caddoan/uvrou-rationalizer/Othello/tutelary/motordrome-wastable/cymotrichy/litterer/heartthrob/comment/stargazer/whidah-clasping/talaria/trembling/murage/immeasurable-equitant/Shukria/new/acrobatical-fatherhood/louvering/oocyst-gaminess/hamletize/eyebright/forum-unsuspectingness/gluck/pascual/troth-unavertibly/spumescent-unornly/aliipoe-demarcate/Tophet/transudate/serpedinous/feed-delusional/Passerina/limpish/Squalida-traitorous/womanity/hornerah/energumenon/goddessship-subventionize/prosar-biscacha/arteriorrhagia/ung show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-20 18:03:42 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.teddypot.space \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-08-20 09:49:47 (3 days ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-08-19 04:25:01 (4 days ago)	Brute force	Brute-Force
🇵🇱 Budyn	2026-08-18 13:58:28 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.astropot.space \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-18 09:04:02 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.239 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.239 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇵🇱 Budyn	2026-08-18 03:17:28 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.goblinpot.space \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-17 21:04:57 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.teddypot.website \| URI: /backup.sql \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 Dorian GRANDHAY	2026-08-17 02:56:05 (6 days ago)	(PERMBLOCK) 74.7.243.239 (US/United States/-) has had more than 4 temp blocks in the last 604800 sec ... show more (PERMBLOCK) 74.7.243.239 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 Petros Stefanakis	2026-08-15 23:38:34 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 74.7.243.239 (US/United States/-)	SQL Injection
🇪🇸 librebit	2026-08-15 14:43:12 (1 week ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-08-15 07:06:43 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.243.239 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.243.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 03:06:37.766312 2026] [security2:error] [pid 20640:tid 20744] [client 74.7.243.239:49864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vivierae.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vivierae.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aoAP_bsg26okIV748ccJIwAAAdQ"], referer: https://www.vivierae.com/author/devadmin/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 433 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.133.7.185

🇺🇸 129.213.151.234

🇧🇩 103.183.62.1

🇮🇳 103.133.116.70

🇨🇦 20.220.206.182

🇷🇴 2.57.122.168

🇹🇼 198.235.24.79

🇳🇱 172.211.56.214

🇺🇸 172.203.245.156

🇺🇸 84.37.235.60

🇺🇸 69.49.246.176

🇺🇸 67.215.227.54

🇨🇱 186.105.217.230

🇺🇸 157.230.53.146

🇺🇸 129.121.123.165

🇨🇦 85.217.149.45

🇧🇬 79.124.60.218

🇧🇷 20.226.91.14

🇵🇭 2001:4455:90c6:4300:ecbf:322b:ac12:2940

🇺🇸 207.90.244.4