IP address

Search at other sites:

.0002.27.160.39

Shodan(more info)

Passive DNS

IP blacklists

CI Army

2.27.160.39 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-22 02:50:00.817000
Was present on blacklist at: 2026-08-05 02:50, 2026-08-06 02:50, 2026-08-07 02:50, 2026-08-08 02:50, 2026-08-09 02:50, 2026-08-10 02:50, 2026-08-20 02:50, 2026-08-21 02:50, 2026-08-22 02:50

Echelon port scan

2.27.160.39 is listed on the Echelon port scan blacklist.

Description: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 09:25:00.361000
Was present on blacklist at: 2026-08-10 09:25, 2026-08-11 09:25, 2026-08-12 09:25, 2026-08-13 09:25, 2026-08-14 09:25, 2026-08-15 09:25, 2026-08-16 09:25, 2026-08-17 09:25, 2026-08-18 09:25

Threat categories

TL	Role	Category	Details
25	src	—

---

DShield reports (IP summary, reports)

2026-08-04

Number of reports: 8151

Distinct targets: 7789

2026-08-05

Number of reports: 16877

Distinct targets: 14707

2026-08-06

Number of reports: 13722

Distinct targets: 11836

2026-08-07

Number of reports: 13722

Distinct targets: 11836

2026-08-08

Number of reports: 13406

Distinct targets: 11558

2026-08-09

Number of reports: 7275

Distinct targets: 5876

2026-08-10

Number of reports: 7275

Distinct targets: 5876

2026-08-11

Number of reports: 8688

Distinct targets: 5320

2026-08-14

Number of reports: 213

Distinct targets: 213

2026-08-15

Number of reports: 213

Distinct targets: 213

2026-08-20

Number of reports: 3575

Distinct targets: 3459

2026-08-21

Number of reports: 3575

Distinct targets: 3459

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-07-25 13:01:13}

Percent days seen: 10 %

Networks: INFATICA, BIRDPROXIES, GONZOPROXY, BYTEFUL, PROXYMA, 2CAPTCHA

Details: https://layer3intel.com/context/2.27.160.39

Origin AS

AS207043 - DEDIK-IO

BGP Prefix

2.27.160.0/24

geo

United States, Los Angeles

🕑 America/Los_Angeles

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

2.24.0.0 - 2.31.255.255

rep

0.0

reserved_range

0

Shodan's InternetDB

Open ports: 22, 6443, 8443

Tags: –

CPEs: cpe:/a:openbsd:openssh:9.2p1, cpe:/o:linux:linux_kernel, cpe:/o:debian:debian_linux

ts_added

2026-08-05 02:50:01.442000

ts_last_update

2026-09-04 02:50:10.337000

Warden event timeline

DShield event timeline

Presence on blacklists