JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 67.227.119.3

67.227.119.3 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	Code200
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21769
Hostname(s)	67.227.119.3.rdns.ColocationAmerica.com
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 67.227.119.3

Whois 67.227.119.3

IP Abuse Reports for 67.227.119.3:

This IP address has been reported a total of 12 times from 7 distinct sources. 67.227.119.3 was first reported on July 6th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-02-21 10:14:14 (3 months ago)	ban-reviewer auto report; ip=67.227.119.3; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ... show more ban-reviewer auto report; ip=67.227.119.3; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) in abuseipdb; Scan behavior detected via http:scan scenario; Decision made within a short time window indicating immediate threat response show less	Port Scan Hacking Brute-Force
🇩🇪 HandyTreff.de	2026-02-08 19:27:18 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.049 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.049 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-04 22:37:19 (5 months ago)	ThreatBook Intelligence: http_proxy more details on http://threatbook.io/ip/67.227.119.3 2026-01-04 ... show more ThreatBook Intelligence: http_proxy more details on http://threatbook.io/ip/67.227.119.3 2026-01-04 21:40:45 /.env 2026-01-04 21:40:45 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip"],"Connection":["close"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"]},"host":"44.243.95.195","method":"POST","proto":"HTTP/1.1","remote_addr":"67.227.119.3:47895","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"} show less	Web App Attack
🇮🇪 Jim Keir	2025-12-03 03:02:00 (6 months ago)	2025-12-03 03:01:59 67.227.119.3 File scanning, blocking 67.227.119.3 for 5 minutes	Web App Attack
🇮🇩 securejdprop	2025-10-26 07:39:06 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound). Ip 67.227.119.3 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-10-26 07:39:04.60746293 +0000 UTC show less	Web App Attack
🇮🇪 Jim Keir	2025-10-05 15:10:10 (8 months ago)	2025-10-05 15:10:09 67.227.119.3 File scanning, blocking 67.227.119.3 for 5 minutes	Web App Attack
🇮🇪 Jim Keir	2025-09-15 13:56:27 (8 months ago)	2025-09-15 13:56:27 67.227.119.3 File scanning, blocking 67.227.119.3 for 5 minutes	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-20 10:57:22 (9 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.e ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.env), Timestamp deviates by 1.5 hours, Suspicious short random path (+3 more). Activity: 622 requests to 4 URLs. Time: 2025-08-14 10:32:24 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇮🇪 Jim Keir	2025-08-12 19:58:06 (9 months ago)	2025-08-12 19:58:04 67.227.119.3 File scanning, blocking 67.227.119.3 for 5 minutes	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-05 10:47:13 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.6 hours, ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.6 hours, Suspicious URL detected (extended rules), Timestamp deviates by 4.2 hours (+2 more). Activity: 113 requests to 2 URLs. Period: 2025-08-05 05:23:34 - 2025-08-05 05:23:34 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇮🇪 AutosOnShow	2025-07-27 03:45:05 (10 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2025-07-27 03:44:16.116 \|	Web App Attack
🇮🇪 Jim Keir	2025-07-06 23:25:03 (11 months ago)	2025-07-06 23:25:02 67.227.119.3 File scanning, blocking 67.227.119.3 for 5 minutes	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.244

🇺🇸 172.253.217.26

🇰🇷 122.35.192.61

🇵🇰 103.57.224.219

🇫🇷 91.196.152.245

🇩🇪 88.214.25.123

🇷🇴 80.94.95.116

🇩🇪 8.211.7.142

🇳🇱 185.242.226.91

🇳🇱 176.65.139.238

🇺🇸 172.203.134.70

🇺🇸 157.230.141.217

🇮🇳 145.79.213.84

🇺🇸 104.23.187.93

🇫🇷 91.196.152.204

🇺🇸 57.141.0.51

🇸🇬 43.163.107.154

🇺🇸 34.16.208.70

🇨🇳 8.141.117.146

🇷🇴 2.57.121.112