JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.227.67.120

165.227.67.120 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 52%: ?

52%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.227.67.120

Whois 165.227.67.120

IP Abuse Reports for 165.227.67.120:

This IP address has been reported a total of 9 times from 9 distinct sources. 165.227.67.120 was first reported on May 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 ago.su	2026-07-26 04:56:07 (12 hours ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
🇩🇪 LRob	2026-07-25 14:46:38 (1 day ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: / \| UA: colly - https://github.com/gocolly/colly/ ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: / \| UA: colly - https://github.com/gocolly/colly/v2 show less	Bad Web Bot
🇺🇸 Lee Daniel	2026-07-25 13:52:10 (1 day ago)	165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/visit/plantation-map HTTP/1.1" 404 26514 ... show more 165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/visit/plantation-map HTTP/1.1" 404 26514 "-" "colly - https://github.com/gocolly/colly/v2" 165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/visit/tips-visiting HTTP/1.1" 404 26513 "-" "colly - https://github.com/gocolly/colly/v2" 165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/plantation/archaelogy HTTP/1.1" 404 26515 "-" "colly - https://github.com/gocolly/colly/v2" 165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/rum/rum-heritage HTTP/1.1" 404 26510 "-" "colly - https://github.com/gocolly/colly/v2" 165.227.67.120 - - [25/Jul/2026:09:52:09 -0400] "GET /visit/visit/shopping HTTP/1.1" 404 26508 "-" "colly - https://github.com/gocolly/colly/v2" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-25 10:07:43 (1 day ago)	http-bad-user-agent - IP: 165.227.67.120 - time="2026-07-25T12:07:43+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 165.227.67.120 - time="2026-07-25T12:07:43+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 165.227.67.120 (US/14061) : 4h ban on Ip 165.227.67.120" module=db show less	Bad Web Bot
🇨🇦 1gz	2026-07-25 01:23:13 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-25 00:10:35 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 15:56:47 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 165.227.67.120 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 165.227.67.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:56:43.241568 2026] [security2:error] [pid 2159442:tid 2159442] [client 165.227.67.120:55740] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|genesis-castle.com\|F\|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "genesis-castle.com"] [uri "/php.ini.ea3.bak"] [unique_id "amOLO_zNxH97Ft8OK_-xkgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 15:33:00 (2 days ago)		Brute-Force
🇺🇸 MPL	2026-05-24 08:32:23 (2 months ago)	tcp/1911	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.56.160.82

🇺🇸 216.180.246.49

🇵🇱 176.53.159.197

🇺🇸 172.253.251.144

🇮🇳 103.192.67.245

🇻🇳 103.90.224.131

🇩🇪 69.5.169.149

🇺🇸 66.132.172.128

🇸🇬 47.79.200.226

🇳🇱 45.148.10.147

🇺🇸 20.84.101.167

🇳🇱 195.178.110.102

🇨🇳 180.76.146.178

🇵🇰 175.107.32.186

🇵🇰 153.117.38.184

🇫🇷 109.199.113.80

🇩🇰 77.241.128.22

🇵🇱 57.128.223.80

🇳🇱 45.148.10.152

🇮🇳 20.192.31.50