JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.112.66.142

27.112.66.142 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 29%: ?

29%

ISP	PT. Graha Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS46063
Domain Name	gtnet.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.112.66.142

Whois 27.112.66.142

IP Abuse Reports for 27.112.66.142:

This IP address has been reported a total of 46 times from 23 distinct sources. 27.112.66.142 was first reported on July 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 liveaspankaj	2026-07-25 15:28:05 (2 days ago)	DDoS attack: 220 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-07-20 02:07:42 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?bklv=yi9KXViVmFx98,/?pdqzkg=6WsETLss9ldao,/admin/login,/sitemap_index.xml,/wp-cron.php?nublt=mHbJGd1iP0,/wp-login.php?jrwc=NL0HqYTtwV0UD; Country=ID; ASN=46063 PT.Graha Telekomunikasi Indonesia show less	DDoS Attack
🇺🇸 kosada.com	2026-07-19 12:54:20 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 anycast_ac	2026-06-30 09:40:34 (3 weeks ago)	[DDoS Attacker] This IP was attacking website web.xzbvc.xyz and sent 64 requests on port 443	DDoS Attack Web App Attack
🇬🇧 Silly Development	2026-06-06 14:59:59 (1 month ago)	Malicious activity detected from 46063 PT.Graha Telekomunikasi Indonesia towards host sillydev.co.uk ... show more Malicious activity detected from 46063 PT.Graha Telekomunikasi Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2026-06-06T14:59:59Z (8 occurrences) show less	DDoS Attack Exploited Host
🇷🇴 Fn4ticHz	2026-05-29 02:47:12 (1 month ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:13:38 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 SuperCores Hosting	2026-04-12 21:42:32 (3 months ago)	[2026-04-12 21:42:32.857296] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	SSH Exploited Host Brute-Force Hacking Port Scan
🇩🇪 NoaQT	2026-04-05 22:06:36 (3 months ago)	27.112.66.142 - - [05/Apr/2026:16:36:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebook ... show more 27.112.66.142 - - [05/Apr/2026:16:36:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:01:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (X11; Lin ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:01:35 (3 months ago)	27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube. ... show more 27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X1 ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-03-07 23:41:25 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
Anonymous	2026-03-02 17:30:13 (4 months ago)	\| [Dangerous/Indonesia] Agressive IP 27.112.66.142 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Agressive IP 27.112.66.142 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-16 01:06:19 (6 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	DDoS Attack Brute-Force SSH
🇮🇳 Bharat Datacenter	2026-01-11 09:30:45 (6 months ago)	1: date=2026-01-11 time=14:58:51 eventtime=1768123731482536590 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=14:58:51 eventtime=1768123731482536590 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=27.112.66.142 srccountry="Indonesia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=215245 attack="tcp_syn_flood" srcport=35845 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 6830 > threshold 2000, repeats 215245 times since last log, pps 6898 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.251.245.88

🇹🇭 202.29.242.115

🇦🇷 181.177.18.47

🇳🇱 160.119.71.11

🇮🇩 157.10.182.14

🇺🇸 143.42.173.60

🇺🇸 104.143.89.238

🇮🇩 103.188.177.46

🇬🇧 35.203.211.38

🇨🇳 218.0.63.25

🇦🇴 193.163.125.30

🇫🇷 91.231.89.236

🇫🇷 54.36.99.29

🇦🇴 193.163.125.52

🇮🇳 143.110.183.139

🇨🇳 114.220.238.21

🇨🇳 112.26.99.93

🇨🇳 101.68.51.68

🇫🇷 85.217.140.26

🇺🇸 74.125.76.25