JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

67.220.82.23

Neutral Activity

Abuse Confidence Score

0% Low Risk

111 reports

74 reporters · latest 3 months ago

ISP: GTHost
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63023
Domain Name: gthost.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

67.220.82.23 has been reported 111 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

111 from 74 distinct reporters

First reported

April 9th 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-08 10:57:00 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 67.220.82.23 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 06:56:52.815030 2026] [security2:error] [pid 2911435:tid 2911435] [client 67.220.82.23:52750] ... show more (mod_security) mod_security (id:210492) triggered by 67.220.82.23 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 06:56:52.815030 2026] [security2:error] [pid 2911435:tid 2911435] [client 67.220.82.23:52750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web99.dnchosting.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "ancLdDXZe4gp0DJn5k6JSQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Skyrider	2026-08-08 09:22:05 UTC · (3 months ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-08 09:11:00 UTC · (3 months ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 raph	2026-08-08 08:53:36 UTC · (3 months ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-08 08:52:42 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 67.220.82.23 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 04:52:32.028556 2026] [security2:error] [pid 3653441:tid 3653441] [client 67.220.82.23:55250] ... show more (mod_security) mod_security (id:210492) triggered by 67.220.82.23 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 04:52:32.028556 2026] [security2:error] [pid 3653441:tid 3653441] [client 67.220.82.23:55250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wa211.org"] [uri "/app_dev.php/_profiler/open"] [unique_id "anbuUHNsWp6zOQESzHj5kwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-22 16:21:36 UTC · (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-12 10:52:28 UTC · (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:24:24 UTC · (6 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 websecuritylabs	2026-05-06 11:12:00 UTC · (6 months ago)	Web App Attack	Web App Attack
🇩🇪 macrob	2026-05-05 22:31:26 UTC · (6 months ago)	2026/05/05 22:31:24 [error] 4182414#4182414: 203701193 access forbidden by rule, client: 67.220.82.23, server: binixo.co, request: "GET /admin/login HTTP/2.0", host: "www.binixo.co" 2026/05/05 22:31:24 [error] 4182414#4182414: 203701196 access forb ... show more 2026/05/05 22:31:24 [error] 4182414#4182414: 203701193 access forbidden by rule, client: 67.220.82.23, server: binixo.co, request: "GET /admin/login HTTP/2.0", host: "www.binixo.co" 2026/05/05 22:31:24 [error] 4182414#4182414: 203701196 access forbidden by rule, client: 67.220.82.23, server: binixo.com.ua, request: "GET /admin/login HTTP/1.1", host: "binixo.com.ua", referrer: "https://www.binixo.com.ua/admin/login" 2026/05/05 22:31:24 [error] 4182410#4182410: *203701197 access forbidden by rule, client: 67.220.82.23, server: binixo.pl, request: "GET /admin/login HTTP/2.0", host: "binixo.pl", referrer: "https://www.binixo.pl/admin/login" ... show less	Web App Attack
🇫🇷 polido	2026-05-05 21:50:38 UTC · (6 months ago)	Unauthorized connection attempt to port 443 from 67.220.82.23	Port Scan
🇩🇪 Gwyneth Llewelyn	2026-05-05 20:10:27 UTC · (6 months ago)	67.220.82.23 - - [05/May/2026:21:10:24 +0100] "GET /roundcube/admin/login HTTP/2.0" 404 997 "https://webmail.gwynethllewelyn.net/admin/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/53 ... show more 67.220.82.23 - - [05/May/2026:21:10:24 +0100] "GET /roundcube/admin/login HTTP/2.0" 404 997 "https://webmail.gwynethllewelyn.net/admin/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" show less	Bad Web Bot
🇻🇳 trung.fun	2026-05-05 17:54:21 UTC · (6 months ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇫🇷 adembaysal	2026-05-05 17:12:04 UTC · (6 months ago)	Domain : testservice-hesapsihirbazi.isteasistan.com Rule : admin 2026-05-05 17:11:36 *hidden-privacy* GET /admin/login - 443 - 67.220.82.23 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 ... show more Domain : testservice-hesapsihirbazi.isteasistan.com Rule : admin 2026-05-05 17:11:36 *hidden-privacy* GET /admin/login - 443 - 67.220.82.23 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 - testservice-hesapsihirbazi.isteasistan.com 404 0 2 1630 280 2309 - - show less	Hacking SQL Injection Brute-Force
🇩🇪 macrob	2026-05-05 16:55:56 UTC · (6 months ago)	2026/05/05 16:55:54 [error] 4182415#4182415: 203164892 access forbidden by rule, client: 67.220.82.23, server: binixo.com.ua, request: "GET /admin/login HTTP/1.1", host: "binixo.com.ua", referrer: "http://www.binixo.com.ua/admin/login" 2026/05/05 16 ... show more 2026/05/05 16:55:54 [error] 4182415#4182415: 203164892 access forbidden by rule, client: 67.220.82.23, server: binixo.com.ua, request: "GET /admin/login HTTP/1.1", host: "binixo.com.ua", referrer: "http://www.binixo.com.ua/admin/login" 2026/05/05 16:55:54 [error] 4182415#4182415: 203161833 access forbidden by rule, client: 67.220.82.23, server: binixo.pl, request: "GET /admin/login HTTP/2.0", host: "binixo.pl", referrer: "http://www.binixo.pl/admin/login" 2026/05/05 16:55:54 [error] 4182415#4182415: 203164897 access forbidden by rule, client: 67.220.82.23, server: binixo.ph, request: "GET /admin/login HTTP/1.1", host: "binixo.ph", referrer: "https://www.binixo.ph/admin/login" ... show less	Web App Attack

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇿 212.47.140.223

🇦🇷 181.25.131.244

🇹🇼 162.158.243.59

🇩🇪 162.158.95.73

🇫🇷 82.230.148.143

🇳🇱 77.67.26.178

🇨🇦 70.49.163.25

🇸🇬 43.106.89.229

🇧🇪 34.77.99.151

🇺🇸 4.150.202.112

🇰🇷 210.206.95.162

🇲🇦 196.217.240.77

🇺🇸 195.184.76.186

🇫🇷 185.14.245.9

🇩🇪 162.158.95.74

🇨🇦 159.203.44.105

🇲🇽 148.243.170.66

🇺🇸 142.93.250.37

🇺🇸 136.111.30.21

🇹🇼 104.28.230.10