This IP address has been reported a total of
104
times from
73 distinct
sources.
52.91.2.81 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show moreCloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
Blocked by UFW (TCP on 80)
Source port: 37060
TTL: 121
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 37060
TTL: 121
Packet length: 60
TOS: 0x00
This report (for 52.91.2.81) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Direct ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show moreDirect ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH].
show less
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
2026-06-06T18:28:28.078071+01:00 vps kernel: [42507072.183420] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more2026-06-06T18:28:28.078071+01:00 vps kernel: [42507072.183420] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=52.91.2.81 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=113 ID=4988 DF PROTO=TCP SPT=22548 DPT=1245 WINDOW=62727 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
Anonymous
Blocked by UFW (TCP on 12443)
Source port: 27910
TTL: 116
Packet length: 60
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 12443)
Source port: 27910
TTL: 116
Packet length: 60
TOS: 0x14
This report (for 52.91.2.81) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on port 56001).
Source port: 22302
TTL: 114
Packet length: 60
TOS: 0x00
This re ...
show moreBlocked by UFW (TCP on port 56001).
Source port: 22302
TTL: 114
Packet length: 60
TOS: 0x00
This report (for 52.91.2.81) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Jun 5 20:50:29 52.91.2.81 TCP SPT=64304 DPT=7547 SYN
Jun 5 20:50:30 52.91.2.81 TCP SPT=64304 DPT=7 ...
show moreJun 5 20:50:29 52.91.2.81 TCP SPT=64304 DPT=7547 SYN
Jun 5 20:50:30 52.91.2.81 TCP SPT=64304 DPT=7547 SYN
Jun 5 20:50:32 52.91.2.81 TCP SPT=64304 DPT=7547
...
show less
Jun 5 17:17:09 52.91.2.81 TCP SPT=56564 DPT=1244 SYN
Jun 5 17:17:10 52.91.2.81 TCP SPT=56564 DPT=1 ...
show moreJun 5 17:17:09 52.91.2.81 TCP SPT=56564 DPT=1244 SYN
Jun 5 17:17:10 52.91.2.81 TCP SPT=56564 DPT=1244 SYN
Jun 5 17:17:12 52.91.2.81 TCP SPT=56564 DPT=1244
...
show less
Jun 5 03:44:58 52.91.2.81 TCP SPT=43508 DPT=3232 SYN
Jun 5 03:44:59 52.91.2.81 TCP SPT=43508 DPT=3 ...
show moreJun 5 03:44:58 52.91.2.81 TCP SPT=43508 DPT=3232 SYN
Jun 5 03:44:59 52.91.2.81 TCP SPT=43508 DPT=3232 SYN
Jun 5 03:45:01 52.91.2.81 TCP SPT=43508 DPT=3232
...
show less
52.91.2.81 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time was ...
show more52.91.2.81 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 1m 10s. Total bytes sent by tarpit: 118B. Report generated by Endlessh Report Generator v1.2.3
show less