JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.227.134

74.7.227.134 was found in our database!

This IP was reported 330 times. Confidence of Abuse is 74%: ?

74%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.227.134

Whois 74.7.227.134

IP Abuse Reports for 74.7.227.134:

This IP address has been reported a total of 330 times from 103 distinct sources. 74.7.227.134 was first reported on October 29th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 15:02:03 (12 hours ago)	(mod_security) mod_security (id:225170) triggered by 74.7.227.134 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.227.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:01:56.840727 2026] [security2:error] [pid 7217:tid 7217] [client 74.7.227.134:56782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.greensandbeans.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greensandbeans.us"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aljyZHYsZrd-PqYnj958mAAAAAE"], referer: https://www.greensandbeans.us/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-15 07:23:57 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-07-13 12:12:37 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-07-12 16:05:18 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 grassau.com	2026-07-11 15:59:27 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.134 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.134 (US/United States/Georgia/Atlanta/-) show less	Bad Web Bot
🇳🇱 Site.eu	2026-07-10 16:05:27 (6 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-07-10 12:09:55 (6 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-07-10 11:23:59 (6 days ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 grassau.com	2026-07-10 04:25:50 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.134 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.134 (US/United States/Georgia/Atlanta/-) show less	Bad Web Bot
🇫🇷 masterguru	2026-07-09 07:48:33 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 maxpower	2026-07-09 05:31:59 (1 week ago)	(junkbot) REGOLA 8 - Junk Bot Blocked 74.7.227.134 (US/United States/-): 1 in the last 3600 secs; Po ... show more (junkbot) REGOLA 8 - Junk Bot Blocked 74.7.227.134 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 74.7.227.134 - - [09/Jul/2026:07:31:55 +0200] "GET / HTTP/2.0" 200 2930 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "-" host=leads.mediaqualitylab.com show less	Port Scan
🇳🇱 Webhoster	2026-07-09 05:07:43 (1 week ago)	{"ClientAddr":"172.71.23.165:12041","ClientHost":"74.7.227.134","ClientPort":"12041","ClientUsername ... show more {"ClientAddr":"172.71.23.165:12041","ClientHost":"74.7.227.134","ClientPort":"12041","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":404,"Duration":9946217,"OriginContentSize":0,"OriginDuration":7814512,"OriginStatus":0,"Overhead":2131705,"RequestAddr":"honey.timvdberg.dev","RequestContentSize":0,"RequestCount":242541,"RequestHost":"honey.timvdberg.dev","RequestMethod":"GET","RequestPath":"/EzBg1oo7QpLuhlH","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-0-pkfmee5oimsxv400fa90gmwk-coraza-honey@docker","ServiceAddr":"172.16.128.2:8085","ServiceName":"honey@docker","ServiceURL":"http://172.16.128.2:8085","StartLocal":"2026-07-09T05:07:22.350452571Z","StartUTC":"2026-07-09T05:07:22.350452571Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"74.7.227.134","request_X-Forwarded-For":"74.7.227.134","request_X-Real-Ip":"172.71.23.16 ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-07-09 02:50:05 (1 week ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 Site.eu	2026-07-08 08:56:23 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-07-08 02:34:58 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.134 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 330 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.103

🇩🇪 194.88.98.122

🇦🇷 186.123.105.31

🇳🇱 160.119.71.136

🇹🇼 111.70.23.248

🇫🇷 85.217.140.45

🇺🇸 63.135.169.175

🇹🇼 49.158.209.91

🇺🇸 20.169.105.51

🇰🇷 14.48.112.8

🇨🇳 222.76.195.22

🇰🇷 211.240.117.71

🇨🇳 183.196.231.245

🇨🇦 179.61.197.107

🇧🇷 170.239.141.14

🇺🇸 162.216.149.201

🇬🇧 154.16.44.70

🇹🇼 128.14.239.39

🇨🇳 115.229.133.192

🇰🇷 112.216.129.27