JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.227.155

74.7.227.155 was found in our database!

This IP was reported 289 times. Confidence of Abuse is 80%: ?

80%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.227.155

Whois 74.7.227.155

IP Abuse Reports for 74.7.227.155:

This IP address has been reported a total of 289 times from 77 distinct sources. 74.7.227.155 was first reported on October 29th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-06-06 10:58:47 (15 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122 ... show more BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇧🇷 Sabrina Soto	2026-06-05 06:34:21 (1 day ago)	Probe for vulnerabilities. Path attempted: /login	Web App Attack
🇫🇷 masterguru	2026-06-04 00:06:17 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇨🇦 dispensight	2026-06-03 19:34:31 (3 days ago)	Automated web scanner: 2 GET requests to clay.dispensight.ca. Paths: /pin. UA: Mozilla/5.0 AppleWebK ... show more Automated web scanner: 2 GET requests to clay.dispensight.ca. Paths: /pin. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot). Microsoft Corporation (Atlanta, United States). show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 18:37:49 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:37:43.916920 2026] [security2:error] [pid 29221:tid 29221] [client 74.7.227.155:59918] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ourodyssey.us\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "aiB0d0Zq6aavpwl8JmiSWwAAABQ"], referer: https://ourodyssey.us/bus-history.html show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-02 23:40:42 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 LSPCCU	2026-06-02 09:04:41 (4 days ago)	TSEC Honeypot Network report. Threat score: 81/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 81/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 74. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇫🇷 masterguru	2026-05-26 08:38:36 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-05-26 02:36:31 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 22:36:24.321897 2026] [security2:error] [pid 13019:tid 13049] [client 74.7.227.155:52080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|catishly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "catishly.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ahUHKJgAfMLbSYydR47dagAAAQc"], referer: http://catishly.com/author/admin-2-2-2-2-2-2-2-2-2-2-2-2-2-2/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 22:54:34 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 18:54:30.129603 2026] [security2:error] [pid 14565:tid 14571] [client 74.7.227.155:59210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pruebas.emehache.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pruebas.emehache.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ahTTJpcOCaJnwsvsXhazNAAAAAA"], referer: https://pruebas.emehache.net/author/soyjuantrece/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 eliosbrocchi	2026-05-25 22:25:45 (1 week ago)	74.7.227.155 - - [26/May/2026:00:25:42 +0200] "GET / HTTP/2.0" 200 14345 "-" "Mozilla/5.0 AppleWebKi ... show more 74.7.227.155 - - [26/May/2026:00:25:42 +0200] "GET / HTTP/2.0" 200 14345 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" ... show less	VPN IP
🇺🇸 TPI-Abuse	2026-05-25 19:41:14 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 74.7.227.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 15:41:08.643601 2026] [security2:error] [pid 22282:tid 22282] [client 74.7.227.155:38740] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aikomp.net\|F\|2"] [data ".3ddisseny.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aikomp.net"] [uri "/www.3ddisseny.com"] [unique_id "ahSl1G-QC3vISWY8De3R3AAAABM"], referer: http://www.aikomp.net show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-21 14:58:37 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.155 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-05-20 22:03:57 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.155 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 74.7.227.155 (US/United States/-) show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-05-20 21:52:43 (2 weeks ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot

Showing 1 to 15 of 289 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 65.49.20.110

🇹🇷 45.133.39.136

🇹🇼 198.235.24.111

🇬🇧 193.176.29.15

🇬🇧 193.176.29.5

🇮🇳 168.220.237.171

🇫🇷 141.94.101.142

🇰🇷 115.22.107.77

🇨🇳 106.12.151.23

🇺🇸 74.128.110.193

🇲🇾 47.250.155.223

🇸🇬 47.84.111.160

🇱🇹 45.227.254.170

🇳🇱 43.239.89.206

🇬🇧 35.203.210.121

🇺🇸 24.234.147.55

🇺🇸 205.210.31.108

🇲🇽 187.140.5.12

🇧🇷 179.150.72.27

🇺🇸 172.190.89.127