JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.112.66.142

27.112.66.142 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 19%: ?

19%

ISP	PT. Graha Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS46063
Domain Name	gtnet.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.112.66.142

Whois 27.112.66.142

IP Abuse Reports for 27.112.66.142:

This IP address has been reported a total of 42 times from 19 distinct sources. 27.112.66.142 was first reported on July 16th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Silly Development	2026-06-06 14:59:59 (6 days ago)	Malicious activity detected from 46063 PT.Graha Telekomunikasi Indonesia towards host sillydev.co.uk ... show more Malicious activity detected from 46063 PT.Graha Telekomunikasi Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2026-06-06T14:59:59Z (8 occurrences) show less	DDoS Attack Exploited Host
🇷🇴 Fn4ticHz	2026-05-29 02:47:12 (2 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:13:38 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 SuperCores Hosting	2026-04-12 21:42:32 (2 months ago)	[2026-04-12 21:42:32.857296] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	SSH Exploited Host Brute-Force Hacking Port Scan
🇩🇪 NoaQT	2026-04-05 22:06:36 (2 months ago)	27.112.66.142 - - [05/Apr/2026:16:36:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebook ... show more 27.112.66.142 - - [05/Apr/2026:16:36:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:01:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (X11; Lin ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:01:35 (2 months ago)	27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube. ... show more 27.112.66.142 - - [05/Apr/2026:16:57:30 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:16:59:31 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 27.112.66.142 - - [05/Apr/2026:17:00:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X1 ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-03-07 23:41:25 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
Anonymous	2026-03-02 17:30:13 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 27.112.66.142 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Agressive IP 27.112.66.142 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-16 01:06:19 (4 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	DDoS Attack Brute-Force SSH
🇮🇳 Bharat Datacenter	2026-01-11 09:30:45 (5 months ago)	1: date=2026-01-11 time=14:58:51 eventtime=1768123731482536590 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=14:58:51 eventtime=1768123731482536590 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=27.112.66.142 srccountry="Indonesia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=215245 attack="tcp_syn_flood" srcport=35845 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 6830 > threshold 2000, repeats 215245 times since last log, pps 6898 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇮🇹 VHosting	2025-12-30 13:28:25 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇬 Fn4ticHz	2025-12-29 14:31:56 (5 months ago)	repeated ddos targeted zeroguard.id -- ZeroGuard	DDoS Attack
🇬🇧 Silly Development	2025-12-25 21:03:46 (5 months ago)	Malicious activity detected from 46063 GRAHANET-AS-ID PT.Graha Telekomunikasi Indonesia towards host ... show more Malicious activity detected from 46063 GRAHANET-AS-ID PT.Graha Telekomunikasi Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2025-12-25T21:03:46Z (7 occurrences) show less	DDoS Attack Exploited Host
🇨🇭 Modules	2025-12-24 19:45:35 (5 months ago)	Open proxy http://27.112.66.142:8181 (RT:21327ms,Loc:Indonesia,ASN:AS46063)	Open Proxy

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 49.249.174.58

🇮🇳 27.123.114.134

🇻🇳 14.225.206.171

🇺🇸 207.90.244.18

🇦🇷 186.124.218.39

🇮🇩 157.15.40.88

🇸🇬 156.245.144.121

🇺🇸 136.144.43.105

🇨🇳 118.122.196.230

🇺🇸 65.111.8.83

🇷🇺 5.3.146.57

🇫🇷 161.97.69.44

🇧🇷 131.100.242.102

🇨🇳 115.190.237.115

🇨🇳 110.53.234.68

🇮🇳 103.248.120.6

🇫🇷 62.171.147.220

🇺🇸 54.205.140.139

🇳🇱 45.148.10.141

🇺🇸 44.74.154.21