JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

67.220.74.114

Recent Activity

Abuse Confidence Score

76% Critical

15 reports

14 reporters · latest 4 days ago

ISP: GTHost
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63023
Hostname(s): 114-74-220-67.clients.gthost.com
Domain Name: gthost.com
Country: 🇺🇸 United States of America
City: Miami, Florida

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 14 distinct reporters

First reported

November 10th 2026

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇦🇷 Argentina 1

Most common categories Web App Attack 11 Brute-Force 8 Bad Web Bot 6 Hacking 4 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-10 20:05:26 UTC · (4 days ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=8	Hacking
🇫🇷 debaba	2026-11-10 19:26:39 UTC · (4 days ago)	aktiv [10/Nov/2026:18:47:40.057917 +0000] avNmzMuUHSSDzpYJgHGd5AAAABQ 67.220.74.114 59324 127.0.0.1 7080 [10/Nov/2026:18:47:40.444824 +0000] avNmzP51cWAQMs9 ...	Brute-Force Web App Attack
🇮🇹 VHosting	2026-11-10 18:50:04 UTC · (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-11-10 18:49:29 UTC · (4 days ago)	67.220.74.114 - - [11/Nov/2026:05:47:26 +1100] "GET /.svn/wc.db HTTP/1.1" 404 988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 67.220.74.114 - - [11/Nov/2026:05:47:26 +1100] "GET /.svn/entries HTTP/1.1" 404 9 ... show more 67.220.74.114 - - [11/Nov/2026:05:47:26 +1100] "GET /.svn/wc.db HTTP/1.1" 404 988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 67.220.74.114 - - [11/Nov/2026:05:47:26 +1100] "GET /.svn/entries HTTP/1.1" 404 988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 67.220.74.114 - - [11/Nov/2026:05:49:28 +1100] "GET /.svn/wc.db HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" TLSv1.3 TLS_AES_128_GCM_SHA256 ... show less	Bad Web Bot
🇧🇪 cmbplf	2026-11-10 18:34:16 UTC · (4 days ago)	188 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 RonnieGas	2026-11-10 18:05:12 UTC · (4 days ago)	Automated scanning and API/path probing against a web application (login, API and path enumeration, proxy pool). Blocked by firewall.	Web App Attack Bad Web Bot Brute-Force Hacking
Anonymous	2026-11-10 17:51:54 UTC · (4 days ago)	Apache vulnerability scan	Brute-Force Web App Attack
🇳🇱 Roderic	2026-11-10 17:14:50 UTC · (4 days ago)	Insights: 6 probe requests within 24 hours on 1 site, e.g. /.git/HEAD (no normal page views)	Web App Attack
🇩🇪 Mr-Money	2026-11-10 17:03:43 UTC · (4 days ago)	scenario: crowdsecurity/http-sensitive-files - events: 5	Web App Attack Hacking
🇷🇴 iulianh	2026-11-10 16:46:19 UTC · (4 days ago)	80,443	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-11-10 16:01:46 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 67.220.74.114 (114-74-220-67.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:01:42.743859 2026] [security2:error] [pid 15790:tid 15790] ... show more (mod_security) mod_security (id:210492) triggered by 67.220.74.114 (114-74-220-67.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:01:42.743859 2026] [security2:error] [pid 15790:tid 15790] [client 67.220.74.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn-0.socialstudiesforkids.com"] [uri "/.svn/wc.db"] [unique_id "avM_5n31FpVoISTij9MqyQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Host One	2026-11-10 15:34:40 UTC · (4 days ago)	Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /.git/HEAD, /app/.git/HEAD, /html/.git/HEAD, /www/.git/HEAD, /public/.git ... show more Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /.git/HEAD, /app/.git/HEAD, /html/.git/HEAD, /www/.git/HEAD, /public/.git/HEAD. Automated report. show less	Bad Web Bot Web App Attack
Anonymous	2026-11-10 14:33:37 UTC · (4 days ago)	GET /.git/HEAD HTTP/1.1 ...	Web App Attack
🇩🇪 LRob	2026-11-10 13:30:06 UTC · (4 days ago)	Secret file probe \| method: GET \| path: /.svn/wc.db, /.svn/entries \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 13:28:54 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 67.220.74.114 (114-74-220-67.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:28:48.722655 2026] [security2:error] [pid 19938:tid 19938] ... show more (mod_security) mod_security (id:210492) triggered by 67.220.74.114 (114-74-220-67.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:28:48.722655 2026] [security2:error] [pid 19938:tid 19938] [client 67.220.74.114:24166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ads.cruisingforsex.com"] [uri "/.svn/wc.db"] [unique_id "avMcENaRhOTa61OypeXdVAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 189.81.214.149

🇺🇸 137.184.155.25

🇺🇸 135.222.174.121

🇺🇸 134.209.117.89

🇸🇬 114.119.154.186

🇺🇸 104.168.67.144

🇩🇪 69.5.169.104

🇺🇸 45.146.55.225

🇩🇪 193.124.20.252

🇺🇸 192.253.209.123

🇺🇸 192.241.135.210

🇲🇽 189.224.43.153

🇲🇽 187.190.35.163

🇲🇽 187.188.64.40

🇺🇸 136.60.164.62

🇨🇳 120.86.180.143

🇳🇱 109.160.32.147

🇿🇦 102.66.181.23

🇳🇱 64.205.72.206

🇮🇩 43.165.198.144