IP address

Search at other sites:

.0052.27.165.138

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

2.27.165.138 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-06 04:00:00.689000
Was present on blacklist at: 2026-06-04 04:00, 2026-06-05 04:00, 2026-06-06 04:00

Echelon VNC login

2.27.165.138 is listed on the Echelon VNC login blacklist.

Description: VNC remote desktop login attempt on port 5900/5901
Type of feed: primary (feed detail page)

Last checked at: 2026-06-10 09:45:00.262000
Was present on blacklist at: 2026-06-04 09:45, 2026-06-05 09:45, 2026-06-06 09:45, 2026-06-07 09:45, 2026-06-08 09:45, 2026-06-09 09:45, 2026-06-10 09:45

CI Army

2.27.165.138 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-07 02:50:00.846000
Was present on blacklist at: 2026-06-06 02:50, 2026-06-07 02:50

Threat categories

TL	Role	Category	Details
48	src	scan	port: 22, 23
25	src	—
25	src	login	protocol: vnc

---

Warden events (86)

2026-06-10

ReconScanning (node.ce2b59): 3

ReconScanning (node.9c1411): 1

2026-06-05

ReconScanning (node.f90c6b): 6

ReconScanning (node.368407): 8

2026-06-04

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.4dc198): 12

ReconScanning (node.86eb21): 32

ReconScanning (node.368407): 4

2026-06-03

ReconScanning (node.368407): 11

ReconScanning (node.f90c6b): 4

ReconScanning (node.86eb21): 3

DShield reports (IP summary, reports)

2026-06-02

Number of reports: 1590

Distinct targets: 1250

2026-06-03

Number of reports: 1590

Distinct targets: 1250

2026-06-04

Number of reports: 2192

Distinct targets: 1690

2026-06-05

Number of reports: 424

Distinct targets: 294

2026-06-06

Number of reports: 84

Distinct targets: 42

2026-06-07

Number of reports: 84

Distinct targets: 42

Origin AS

AS150249 - IDNIC-ATHARVA-AS-ID IDNIC-ATHARVA-AS-ID

BGP Prefix

2.27.165.0/24

geo

Indonesia, Jakarta

🕑 Asia/Jakarta

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

2.24.0.0 - 2.31.255.255

last_activity

2026-06-10 18:26:47

last_warden_event

2026-06-10 18:26:47

rep

0.004646573629514372

reserved_range

0

Shodan's InternetDB

Open ports: 443

Tags: –

CPEs: cpe:/a:apache:http_server

ts_added

2026-06-03 05:00:47.963000

ts_last_update

2026-06-20 05:00:50.966000

Warden event timeline

DShield event timeline

Presence on blacklists