JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.27.52.65

2.27.52.65 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 63%: ?

63%

ISP	Xorek.Cloud Helsinki
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215590
Domain Name	xorek.cloud
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.27.52.65

Whois 2.27.52.65

IP Abuse Reports for 2.27.52.65:

This IP address has been reported a total of 15 times from 13 distinct sources. 2.27.52.65 was first reported on July 9th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-07-12 06:24:00 (1 week ago)	Blocked for port scanning. Time: Sun Jul 12. 04:07:53 2026 +0200 IP: 2.27.52.65 (GB/United Kingdom ... show more Blocked for port scanning. Time: Sun Jul 12. 04:07:53 2026 +0200 IP: 2.27.52.65 (GB/United Kingdom/-) Sample of block hits: Jul 12 04:05:47 vserv kernel: [22666327.473003] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=2.27.52.65 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=38835 PROTO=TCP SPT=61000 DPT=5988 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 04:05:56 vserv kernel: [22666336.540302] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=2.27.52.65 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=25896 PROTO=TCP SPT=61000 DPT=5915 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 04:05:59 vserv kernel: [22666339.130486] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=2.27.52.65 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=53649 PROTO=TCP SPT=61000 DPT=5975 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 04:06:13 vserv kernel: [22666353.186577] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=2.27.52.65 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=58963 PROTO=TCP SPT=61000 DPT=5917 WINDOW=1025 RES show less	Port Scan
🇺🇸 MrMac	2026-07-12 06:08:45 (1 week ago)	TCP/5902,5903,5904,5905,5906,...(87 ports total, 87 packets) over 7.0 days	Port Scan
🇩🇪 dispaisyenterprises	2026-07-12 03:34:46 (1 week ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5950 [1], 5968 [1], 5943 [1] TCP R ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5950 [1], 5968 [1], 5943 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Darki1962	2026-07-12 02:45:02 (1 week ago)	12 hits, proto=tcp, ports=5903,5913,5922,5933,5936,5955,5974,5984,5993,5995,5999,6000	Port Scan Hacking Brute-Force SSH
🇺🇸 xmission.com	2026-07-11 23:59:11 (1 week ago)	Blocked by UFW (TCP on 5947) Source port: 61000 TTL: 233 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5947) Source port: 61000 TTL: 233 Packet length: 44 TOS: 0x08 This report (for 2.27.52.65) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-07-11 19:32:25 (1 week ago)	Blocked by UFW [5976/tcp] Source port: 61000 TTL: 241 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [5976/tcp] Source port: 61000 TTL: 241 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 ByeByte API	2026-07-11 15:36:59 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5903, 5910, 5917, 5925, 5 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5903, 5910, 5917, 5925, 5926, 5927, 5928, 5930. Activity window: 2026-07-11 14:33 UTC to 2026-07-11 15:36 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-07-11 15:36:59 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5903, 5910, 5917, 5925, 5 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5903, 5910, 5917, 5925, 5926, 5927, 5928, 5930. Activity window: 2026-07-11 14:33 UTC to 2026-07-11 15:36 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-07-11 15:01:38 (1 week ago)	byebyte.space auth: TCP packet to port 5984 (high-risk service) at 2026-07-11T15:01:38Z. Source port ... show more byebyte.space auth: TCP packet to port 5984 (high-risk service) at 2026-07-11T15:01:38Z. Source port 61000. TCP flags: SYN. Packet: 44B, TTL 250, window 1025, IP id 21181. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (barebone) (generic match), 5 hops. show less	Port Scan
🇳🇱 VMHeaven.io	2026-07-11 14:22:36 (1 week ago)	Blocked by UFW [5944/tcp] Source port: 61000 TTL: 250 Packet length: 44	Port Scan
🇦🇺 PetePK	2026-07-11 13:29:03 (1 week ago)	Probed 37 time(s): TCP/5948, TCP/5976, TCP/5902, TCP/5978, TCP/5910, TCP/5985, TCP/5900, TCP/5953, T ... show more Probed 37 time(s): TCP/5948, TCP/5976, TCP/5902, TCP/5978, TCP/5910, TCP/5985, TCP/5900, TCP/5953, TCP/5906, TCP/5917, TCP/5908, TCP/5955, TCP/5938, TCP/5954, TCP/5905, TCP/5984, TCP/5947, TCP/5901, TCP/5971, TCP/5924, TCP/5937, TCP/5952, TCP/5989, TCP/5911, TCP/5965, TCP/5988, TCP/5981, TCP/5904, TCP/5919, TCP/5944, TCP/5943, TCP/5950, TCP/5970, TCP/5990, TCP/5993, TCP/5920, TCP/5960 show less	Port Scan
🇩🇪 bescared	2026-07-11 13:09:19 (1 week ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
Anonymous	2026-07-11 13:07:36 (1 week ago)	Blocked by firewall on hugin [5932/tcp] \| Rule: UFW \| SPT: 61000 \| TTL: 248 \| LEN: 44 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [5932/tcp] \| Rule: UFW \| SPT: 61000 \| TTL: 248 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 kingjan1999	2026-07-11 13:07:03 (1 week ago)	Blocked by UFW [5937/tcp] \| SPT: 61000 \| TTL: 248 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [5937/tcp] \| SPT: 61000 \| TTL: 248 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 pearbright	2026-07-09 23:43:32 (1 week ago)	2026-07-09T23:40:21.398164+00:00 srv1791811 kernel: [909499.521847] [UFW BLOCK] IN=eth0 OUT= MAC=64: ... show more 2026-07-09T23:40:21.398164+00:00 srv1791811 kernel: [909499.521847] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=2.27.52.65 DST=76.13.255.190 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=46125 PROTO=TCP SPT=61234 DPT=5924 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-09T23:40:28.946250+00:00 srv1791811 kernel: [909507.069141] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=2.27.52.65 DST=76.13.255.190 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=7794 PROTO=TCP SPT=61234 DPT=5951 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-09T23:40:39.636743+00:00 srv1791811 kernel: [909517.760949] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=2.27.52.65 DST=76.13.255.190 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=59901 PROTO=TCP SPT=61234 DPT=5978 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-09T23:41:02.545656+00:00 srv1791811 kernel: [909540.669858] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=2.27.52.65 DST=76.13.255.19 ... show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.140.179.210

🇭🇰 152.32.240.77

🇫🇮 147.185.133.159

🇭🇰 156.225.1.99

🇻🇳 117.6.133.147

🇷🇴 92.118.39.225

🇰🇿 31.132.90.3

🇺🇸 198.44.166.39

🇨🇴 181.118.154.197

🇺🇸 172.58.113.132

🇺🇸 158.94.211.32

🇺🇸 147.185.132.150

🇨🇳 61.177.173.246

🇬🇧 35.203.211.28

🇷🇺 5.140.212.144

🇺🇸 216.218.206.103

🇩🇪 216.26.244.211

🇩🇪 216.26.244.185

🇩🇪 216.26.244.138

🇩🇪 216.26.244.66