IP address

Search at other sites:

.106103.242.2.89spk.laws.ms

Shodan(more info)

Passive DNS

IP blacklists

CI Army

103.242.2.89 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-07-11 02:50:00.808000
Was present on blacklist at: 2026-07-06 02:50, 2026-07-07 02:50, 2026-07-08 02:50, 2026-07-09 02:50, 2026-07-10 02:50, 2026-07-11 02:50

AbuseIPDB

103.242.2.89 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-07-30 04:00:00.532000
Was present on blacklist at: 2026-07-06 04:00, 2026-07-07 04:00, 2026-07-08 04:00, 2026-07-29 04:00, 2026-07-30 04:00

Threat categories

TL	Role	Category	Details
75	src	scan	port: 22
25	src	—

---

Warden events (2054)

2026-07-30

ReconScanning (node.ce2b59): 49

2026-07-29

ReconScanning (node.ce2b59): 79

2026-07-28

ReconScanning (node.ce2b59): 80

2026-07-27

ReconScanning (node.ce2b59): 79

2026-07-26

ReconScanning (node.ce2b59): 78

2026-07-25

ReconScanning (node.ce2b59): 81

2026-07-24

ReconScanning (node.ce2b59): 79

ReconScanning (node.4dc198): 1

2026-07-23

ReconScanning (node.ce2b59): 80

2026-07-22

ReconScanning (node.ce2b59): 29

2026-07-09

ReconScanning (node.ce2b59): 21

2026-07-08

ReconScanning (node.368407): 42

ReconScanning (node.4dc198): 42

ReconScanning (node.ce2b59): 17

2026-07-07

ReconScanning (node.368407): 273

ReconScanning (node.4dc198): 285

ReconScanning (node.ce2b59): 31

2026-07-06

ReconScanning (node.368407): 272

ReconScanning (node.4dc198): 286

ReconScanning (node.ce2b59): 43

2026-07-05

ReconScanning (node.ce2b59): 15

ReconScanning (node.368407): 43

ReconScanning (node.4dc198): 49

DShield reports (IP summary, reports)

2026-07-06

Number of reports: 1035

Distinct targets: 261

2026-07-07

Number of reports: 1035

Distinct targets: 261

2026-07-08

Number of reports: 246

Distinct targets: 150

2026-07-09

Number of reports: 106

Distinct targets: 69

2026-07-10

Number of reports: 106

Distinct targets: 69

2026-07-23

Number of reports: 167

Distinct targets: 94

2026-07-24

Number of reports: 175

Distinct targets: 96

2026-07-25

Number of reports: 158

Distinct targets: 92

2026-07-26

Number of reports: 161

Distinct targets: 91

2026-07-27

Number of reports: 161

Distinct targets: 91

2026-07-28

Number of reports: 139

Distinct targets: 84

2026-07-29

Number of reports: 139

Distinct targets: 84

2026-07-30

Number of reports: 93

Distinct targets: 58

Origin AS

AS55933 - CLOUDIE-AS-AP

BGP Prefix

103.242.2.0/23

geo

Hong Kong

🕑 Asia/Hong_Kong

hostname

spk.laws.ms

Address block ('inetnum' or 'NetRange' in whois database)

103.242.0.0 - 103.242.3.255

last_activity

2026-07-30 14:30:24

last_warden_event

2026-07-30 14:30:24

rep

0.10645150454062424

reserved_range

0

Shodan's InternetDB

Open ports: 22, 3000

Tags: –

CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux

ts_added

2026-07-05 19:55:48.458000

ts_last_update

2026-08-05 19:55:50.196000

Warden event timeline

DShield event timeline

Presence on blacklists