JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.131.74

145.223.131.74 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 92%: ?

92%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.131.74

Whois 145.223.131.74

IP Abuse Reports for 145.223.131.74:

This IP address has been reported a total of 60 times from 25 distinct sources. 145.223.131.74 was first reported on April 11th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 pixelmemory.us	2026-07-03 16:30:25 (8 hours ago)	2026-07-03T16:28:11 145.223.131.74 GET /Photos/Vacation/2015-03%20Japan/raw/IMG_0487.CR2 Mozilla/5.0 ... show more 2026-07-03T16:28:11 145.223.131.74 GET /Photos/Vacation/2015-03%20Japan/raw/IMG_0487.CR2 Mozilla/5.0 (Windows NT 10.0; rv:145.0) Gecko/20100101 Firefox/145.0 ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 14:31:37 (10 hours ago)	(mod_security) mod_security (id:210730) triggered by 145.223.131.74 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 145.223.131.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:31:30.966479 2026] [security2:error] [pid 1066:tid 1066] [client 145.223.131.74:34868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|modmove.com\|F\|2"] [data ".spoontheband.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "modmove.com"] [uri "/www.spoontheband.com"] [unique_id "akfHwjicHJ1CBoRMCydo2wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 09:26:15 (15 hours ago)	FortiWeb WAF: 30 attacks detected. Threat Score: 11400. Types: Client Management(15), GEO IP(15). Or ... show more FortiWeb WAF: 30 attacks detected. Threat Score: 11400. Types: Client Management(15), GEO IP(15). Origin: Singapore. show less	Web App Attack
🇷🇴 INTEQ	2026-07-03 07:39:24 (17 hours ago)	Web attack from 145.223.131.74	Web App Attack
🇩🇪 4server	2026-07-03 07:06:49 (17 hours ago)	[FriJul0309:06:36.7195922026][security2:error][pid4037881:tid4038003][client145.223.131.74:0]ModSecu ... show more [FriJul0309:06:36.7195922026][security2:error][pid4037881:tid4038003][client145.223.131.74:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.specialfood.ch\"][uri\"/index.php\"][unique_id\"akdffH3bcYopWF5XPcKNxAAAAQQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 ersei.net	2026-07-03 01:37:37 (23 hours ago)	Web app exploiting	Web App Attack
🇩🇪 Vegascosmetics	2026-07-02 23:31:22 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 nodepile	2026-07-02 20:37:53 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/wishlist/index/add/product/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/wishlist/index/add/product/8285/form_key/7N8m3p7Sp4tQS6OH/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/180.1') show less	Web App Attack Exploited Host
Anonymous	2026-07-02 20:11:08 (1 day ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-02 11:23:53 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 pixelmemory.us	2026-07-02 09:24:13 (1 day ago)	2026-07-02T09:20:14 145.223.131.74 GET /Photos/Vacation/2015-03%20Japan/raw/IMG_0580.CR2.xmp Mozilla ... show more 2026-07-02T09:20:14 145.223.131.74 GET /Photos/Vacation/2015-03%20Japan/raw/IMG_0580.CR2.xmp Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:{version}.0) Gecko/20100101 Firefox/133.0 ... show less	Bad Web Bot
🇷🇴 INTEQ	2026-07-01 10:38:56 (2 days ago)	Web attack from 145.223.131.74	Web App Attack
Anonymous	2026-07-01 09:34:14 (2 days ago)	FortiWeb WAF: 44 attacks detected. Threat Score: 6400. Types: Client Management(22), GEO IP(22). Ori ... show more FortiWeb WAF: 44 attacks detected. Threat Score: 6400. Types: Client Management(22), GEO IP(22). Origin: Singapore. show less	Web App Attack
🇺🇸 gui-ying233	2026-07-01 00:34:28 (3 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nodepile	2026-06-30 19:11:32 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalog/product_compare/add ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalog/product_compare/add/product/2113/uenc/aHR0cHM6Ly93d3cudW1uaXR6YS5jb20vYnJvd3NlLWJ5LWNhci1tb2RlbC9mb3JkL3RydWNrcy5odG1s/form_key/F5HQS2L7LwUJw3YN/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:{version}.0) Gecko/20100101 Firefox/133.0') show less	Web App Attack Exploited Host

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.96

🇬🇧 193.163.125.196

🇺🇸 193.26.115.137

🇧🇷 177.44.96.177

🇰🇷 175.119.225.68

🇸🇬 159.223.85.210

🇩🇪 89.246.100.3

🇸🇪 78.73.229.90

🇲🇽 45.167.93.160

🇸🇬 43.156.24.132

🇵🇪 38.224.49.7

🇮🇳 20.219.187.11

🇺🇸 20.163.60.206

🇰🇷 222.232.176.7

🇺🇸 213.201.204.22

🇨🇴 181.129.41.162

🇩🇪 69.5.169.229

🇧🇷 45.164.251.106

🇳🇱 45.148.10.152

🇯🇵 20.63.222.120