IP address

Search at other sites:
.0082.27.165.140
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
UCEPROTECT L1
2.27.165.140 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-18 15:45:00.617000
Was present on blacklist at: 2026-05-18 23:45, 2026-05-19 07:45, 2026-05-19 23:45, 2026-05-20 07:45, 2026-05-20 15:45, 2026-05-20 23:45, 2026-05-21 07:45, 2026-05-21 15:45, 2026-05-22 07:45, 2026-05-23 15:45, 2026-05-23 23:45, 2026-05-24 07:45, 2026-05-24 15:45, 2026-05-24 23:45, 2026-05-25 07:45, 2026-05-25 15:45, 2026-06-01 23:45, 2026-06-02 07:45, 2026-06-02 15:45, 2026-06-02 23:45, 2026-06-03 07:45, 2026-06-03 15:45, 2026-06-03 23:45, 2026-06-04 07:45, 2026-06-04 15:45, 2026-06-04 23:45, 2026-06-05 07:45, 2026-06-05 15:45, 2026-06-05 23:45, 2026-06-06 07:45, 2026-06-06 15:45, 2026-06-06 23:45, 2026-06-07 07:45, 2026-06-07 15:45, 2026-06-07 23:45, 2026-06-08 07:45, 2026-06-08 15:45, 2026-06-08 23:45, 2026-06-09 07:45, 2026-06-11 23:45, 2026-06-12 07:45, 2026-06-12 15:45, 2026-06-12 23:45, 2026-06-13 07:45, 2026-06-13 15:45, 2026-06-13 23:45, 2026-06-14 07:45, 2026-06-14 15:45, 2026-06-14 23:45, 2026-06-15 07:45, 2026-06-15 15:45, 2026-06-15 23:45, 2026-06-16 07:45, 2026-06-16 15:45, 2026-06-16 23:45, 2026-06-17 07:45, 2026-06-17 15:45, 2026-06-17 23:45, 2026-06-18 15:45
CI Army
2.27.165.140 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 02:50:00.820000
Was present on blacklist at: 2026-06-07 02:50, 2026-06-08 02:50, 2026-06-09 02:50, 2026-06-10 02:50, 2026-06-11 02:50, 2026-06-12 02:50, 2026-06-13 02:50, 2026-06-14 02:50
AbuseIPDB
2.27.165.140 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-12 04:00:00.632000
Was present on blacklist at: 2026-06-12 04:00

Threat categories

TLRoleCategoryDetails
50 src scan
40 src —
Warden events (59)
2026-06-04
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.4dc198): 21
ReconScanning (node.86eb21): 5
2026-06-02
ReconScanning (node.368407): 16
ReconScanning (node.f90c6b): 15
DShield reports (IP summary, reports)
2026-05-18
Number of reports: 643
Distinct targets: 441
2026-05-19
Number of reports: 643
Distinct targets: 441
2026-06-02
Number of reports: 946
Distinct targets: 675
2026-06-03
Number of reports: 946
Distinct targets: 675
2026-06-04
Number of reports: 447
Distinct targets: 404
2026-06-05
Number of reports: 14
Distinct targets: 7
2026-06-06
Number of reports: 159
Distinct targets: 159
2026-06-07
Number of reports: 159
Distinct targets: 159
2026-06-12
Number of reports: 273
Distinct targets: 196
2026-06-13
Number of reports: 273
Distinct targets: 196
2026-06-14
Number of reports: 398
Distinct targets: 203
Origin AS
AS150249 - IDNIC-ATHARVA-AS-ID IDNIC-ATHARVA-AS-ID
BGP Prefix
2.27.165.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
2.24.0.0 - 2.31.255.255
last_activity
2026-06-04 12:09:04
last_warden_event
2026-06-04 12:09:04
rep
0.008029194194365208
reserved_range
0
ts_added
2026-05-18 23:56:39.583000
ts_last_update
2026-06-20 23:56:40.665000

Warden event timeline

DShield event timeline

Presence on blacklists