JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.147.28.73

27.147.28.73 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 14%: ?

14%

ISP	Extra-Lan Technologies Co., LTD
Usage Type	Fixed Line ISP
ASN	AS18429
Domain Name	extra-lan.com.tw
Country	🇹🇼 Taiwan
City	Banqiao, Taipei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.147.28.73

Whois 27.147.28.73

IP Abuse Reports for 27.147.28.73:

This IP address has been reported a total of 57 times from 36 distinct sources. 27.147.28.73 was first reported on May 23rd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-07-28 19:41:18 (3 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
Anonymous	2026-07-20 07:01:28 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?gmguih=67p3PeW,/?guzvsdtk=8S6X8Mfc,/?myghwofz=gw8TkwgCE,/?txpettc=6JWMrQs49,/actuator/env,/rss.xml; Country=TW; ASN=18429 Extra-Lan Technologies Co., LTD show less	DDoS Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 08:22:14 (1 month ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇩🇪 burger	2026-06-21 11:48:02 (2 months ago)	Cloudflare l7ddos, Mozilla/5.0 (iPhone; CPU iPhone OS 16_5 like Mac OS X)	DDoS Attack
🇩🇪 anycast_ac	2026-06-19 11:09:07 (2 months ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 2219 requests on port 443	DDoS Attack Web App Attack
🇷🇴 Fn4ticHz	2026-05-30 15:42:19 (2 months ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇳🇱 ByeByte API	2026-05-18 17:54:33 (3 months ago)	byebyte.space auth: Rate-limit escalation at 2026-05-18T17:54:33Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-18T17:54:33Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Linux; Android 13; SM-A546B) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/17.6'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="126", "Chromium";v="126", "Not.A/Brand";v="24"'. Platform: "Android" (mobile=?1). Referer: 'https://google.com/'. Country (CF): TW. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:02:52 (3 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 quilla	2026-03-30 20:13:00 (4 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack
🇧🇪 cmbplf	2026-03-01 15:20:03 (5 months ago)	1420 limiting connections by zone (1d21h43m)	DDoS Attack
🇧🇬 cheatmaster.store	2026-02-26 05:16:57 (5 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Taiwan Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 02:28:04 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 27.147.28.73 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 27.147.28.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 21:27:56.016504 2026] [security2:error] [pid 13360:tid 13360] [client 27.147.28.73:44047] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.thehomedaleinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thehomedaleinn.com"] [uri "/https:/directnic.com"] [unique_id "aYf0rF_gtbZw_iCOv7b6eQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-30 13:28:14 (7 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇬 Fn4ticHz	2025-12-15 08:22:46 (8 months ago)	repeated ddos targeted zeroguard.space -- ZeroGuard	DDoS Attack
🇨🇦 1gz	2025-12-14 21:13:30 (8 months ago)	Triggered Cloudflare WAF (l7ddos) from TW. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from TW. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 160.187.240.90

🇮🇳 160.187.54.87

🇦🇺 114.31.75.33

🇮🇳 103.77.14.62

🇧🇷 45.205.1.245

🇳🇱 31.56.209.211

🇨🇳 140.249.22.89

🇧🇷 137.131.232.50

🇳🇱 91.92.42.36

🇧🇬 79.124.60.218

🇺🇸 66.253.3.40

🇺🇸 66.132.186.192

🇺🇸 45.156.129.131

🇺🇸 35.196.33.217

🇺🇸 198.46.237.172

🇳🇱 193.47.62.69

🇨🇴 176.57.202.13

🇵🇰 160.187.180.173

🇮🇩 160.187.165.218

🇭🇰 152.32.189.59