JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.7.227.22

74.7.227.22 was found in our database!

This IP was reported 269 times. Confidence of Abuse is 70%: ?

70%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.7.227.22

Whois 74.7.227.22

IP Abuse Reports for 74.7.227.22:

This IP address has been reported a total of 269 times from 82 distinct sources. 74.7.227.22 was first reported on October 28th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-13 21:41:12 (2 hours ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-06-12 21:29:40 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇨🇿 ptlab	2026-06-12 16:00:06 (1 day ago)	Detected forbidden path/plugin attack from WP-host.	Hacking Web App Attack
🇫🇷 masterguru	2026-06-12 12:51:16 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-06-11 21:18:28 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-06-10 21:07:06 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 NotCool	2026-06-07 10:18:04 (6 days ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.227.22 (US/United States/-): 50 in the last 3600 ... show more (CRAWLDELAY) Generic Bot Crawl-delay Violation 74.7.227.22 (US/United States/-): 50 in the last 3600 secs show less	Bad Web Bot
🇫🇷 masterguru	2026-06-03 17:56:58 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 2 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-03 02:45:42 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:45:35.532209 2026] [security2:error] [pid 15929:tid 15929] [client 74.7.227.22:50204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|carolinafootprints.com\|F\|2"] [data ".wildlifeshouth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "carolinafootprints.com"] [uri "/article-published-by-wildlife-south/www.wildlifeshouth.com"] [unique_id "ah-VT6ZsH9d_9lWK3Sx6_wAAAA0"], referer: https://carolinafootprints.com/article-published-by-wildlife-south/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 19:55:14 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:55:08.422835 2026] [security2:error] [pid 17165:tid 17165] [client 74.7.227.22:39098] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|agrollum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agrollum.com"] [uri "/wp-json/wp/v2/users/3"] [unique_id "ah81HISQYOm42UFgXTISlQAAAAg"], referer: https://agrollum.com/author/devsdigitalya/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Philister11	2026-06-02 00:47:38 (1 week ago)	CrowdSec: crowdsecurity/http-probing (US/AS8075)	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-01 06:35:58 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 74.7.227.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 02:35:54.686227 2026] [security2:error] [pid 2197:tid 2197] [client 74.7.227.22:34676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.otraes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.otraes.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "ah0oStaFYk7P8qKvbWtIfwAAACM"], referer: https://www.otraes.com/author/candace/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-01 05:06:13 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-29 16:08:58 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-28 15:44:42 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 i ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.227.22 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.6.124.18

🇷🇺 185.6.124.13

🇺🇸 162.216.150.58

🇺🇸 162.216.149.160

🇺🇸 216.25.89.116

🇰🇷 211.223.107.86

🇧🇷 191.252.156.214

🇺🇸 157.245.114.249

🇺🇸 147.185.132.227

🇺🇸 134.202.243.81

🇨🇳 110.167.169.106

🇭🇰 103.115.56.3

🇹🇷 78.188.19.43

🇺🇸 52.186.182.35

🇬🇧 35.203.211.31

🇺🇸 20.65.178.1

🇺🇸 3.12.153.137

🇺🇸 216.180.246.54

🇮🇳 203.201.63.37

🇮🇩 203.175.125.141