JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.3.77.27

122.3.77.27 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 34%: ?

34%

ISP	IPG
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	122.3.77.27.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Quezon City, National Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.3.77.27

Whois 122.3.77.27

IP Abuse Reports for 122.3.77.27:

This IP address has been reported a total of 81 times from 43 distinct sources. 122.3.77.27 was first reported on July 13th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-30 15:43:00 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇫🇷 Sklurk	2026-05-28 01:54:58 (1 week ago)	Web App Attack	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇫🇷 MatStef132	2026-05-22 14:04:50 (2 weeks ago)	MatShield L7: blocked on mathost.eu (suspicious behaviour)	DDoS Attack
🇳🇱 ByeByte API	2026-05-16 17:52:13 (3 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T17:52:13Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T17:52:13Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/17.6'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="127", "Chromium";v="127", "Not.A/Brand";v="24"'. Platform: "macOS" (mobile=?0). Referer: 'https://google.com/'. Country (CF): PH. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-16 16:56:08 (3 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T16:56:07Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T16:56:07Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/17.0'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="122", "Chromium";v="122", "Not.A/Brand";v="24"'. Platform: "macOS" (mobile=?0). Connection: Keep-Alive. Country (CF): PH. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:03:06 (4 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇨🇭 ALPHANET	2026-05-09 12:20:09 (4 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇮 percocet	2026-04-20 23:08:14 (1 month ago)	Cloudflare blocked 901 requests (HTTP 403) in 1h. Country: PH	DDoS Attack Web App Attack
🇩🇪 NoaQT	2026-04-05 22:06:17 (2 months ago)	122.3.77.27 - - [05/Apr/2026:16:36:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.blogblog. ... show more 122.3.77.27 - - [05/Apr/2026:16:36:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.blogblog.org/blog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:49:15 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:51:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.next.info/home" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://pro-shop.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:58:35 (2 months ago)	122.3.77.27 - - [05/Apr/2026:16:49:15 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.c ... show more 122.3.77.27 - - [05/Apr/2026:16:49:15 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:51:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.next.info/home" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:51:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.next.info/home" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://pro-shop.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.3.77.27 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://pro-shop.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X ... show less	DDoS Attack
🇩🇪 FeG Deutschland	2026-04-04 18:58:05 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 COMPLEX	2026-03-17 18:26:51 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from PH. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from PH. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:145.0) Gecko/145.0 Firefox/145.0 show less	DDoS Attack Bad Web Bot
Anonymous	2026-03-01 00:09:33 (3 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇮🇳 Bharat Datacenter	2026-01-11 09:32:29 (4 months ago)	1: date=2026-01-11 time=14:59:51 eventtime=1768123791482412910 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=14:59:51 eventtime=1768123791482412910 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=122.3.77.27 srccountry="Philippines" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=297945 attack="tcp_syn_flood" srcport=48067 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 7526 > threshold 2000, repeats 297945 times since last log, pps 7601 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.155

🇺🇸 162.216.149.179

🇱🇹 77.90.185.78

🇧🇪 35.205.8.250

🇰🇷 211.46.188.16

🇦🇺 170.64.168.155

🇭🇰 118.26.36.248

🇨🇳 112.86.225.229

🇲🇾 103.24.192.83

🇺🇸 99.57.36.196

🇷🇺 92.36.96.149

🇺🇸 52.161.82.104

🇩🇪 31.70.91.79

🇺🇸 191.101.33.110

🇬🇧 185.216.145.169

🇸🇬 185.200.116.68

🇹🇭 171.6.192.20

🇱🇹 91.224.92.147

🇳🇱 89.248.163.200

🇳🇱 87.229.95.231