IP address
Tags:
IP in hostname
Whitelisted
Research scanner
- IP blacklists
Turris greylist
103.203.56.2 is listed on the Turris greylist blacklist.
Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed:
primary (
feed detail page)
Last checked at:
2026-03-03 22:15:00.119000
Was present on blacklist at:
2026-01-29 22:15,
2026-01-30 22:15,
2026-01-31 22:15,
2026-02-01 22:15,
2026-02-02 22:15,
2026-02-03 22:15,
2026-02-04 22:15,
2026-02-05 22:15,
2026-02-06 22:15,
2026-02-07 22:15,
2026-02-08 22:15,
2026-02-09 22:15,
2026-02-10 22:15,
2026-02-11 22:15,
2026-02-12 22:15,
2026-02-13 22:15,
2026-02-14 22:15,
2026-02-15 22:15,
2026-02-16 22:15,
2026-02-17 22:15,
2026-02-18 22:15,
2026-02-19 22:15,
2026-02-20 22:15,
2026-02-22 22:15,
2026-02-23 22:15,
2026-02-25 22:15,
2026-02-26 22:15,
2026-02-27 22:15,
2026-02-28 22:15,
2026-03-01 22:15,
2026-03-03 22:15
AbuseIPDB
103.203.56.2 is listed on the AbuseIPDB blacklist.
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed:
primary (
feed detail page)
Last checked at:
2026-04-26 04:00:00.609000
Was present on blacklist at:
2026-01-30 05:00,
2026-03-03 05:00,
2026-04-10 04:00,
2026-04-15 04:00,
2026-04-16 04:00,
2026-04-22 04:00,
2026-04-24 04:00,
2026-04-26 04:00
Echelon web crawler
103.203.56.2 is listed on the Echelon web crawler blacklist.
Description: HTTP web crawling activity detected on web honeypots
Type of feed:
primary (
feed detail page)
Last checked at:
2026-04-29 09:50:01.457000
Was present on blacklist at:
2026-03-05 10:50,
2026-03-06 10:50,
2026-03-11 10:50,
2026-03-12 10:50,
2026-03-14 10:50,
2026-03-16 10:50,
2026-03-17 10:50,
2026-03-24 10:50,
2026-03-25 10:50,
2026-03-26 10:50,
2026-03-27 10:50,
2026-03-28 10:50,
2026-03-29 09:50,
2026-03-30 09:50,
2026-03-31 09:50,
2026-04-01 09:50,
2026-04-02 09:50,
2026-04-03 09:50,
2026-04-04 09:50,
2026-04-05 09:50,
2026-04-06 09:50,
2026-04-07 09:50,
2026-04-08 09:50,
2026-04-09 09:50,
2026-04-10 09:50,
2026-04-11 09:50,
2026-04-12 09:50,
2026-04-16 09:50,
2026-04-17 09:50,
2026-04-19 09:50,
2026-04-20 09:50,
2026-04-21 09:50,
2026-04-22 09:50,
2026-04-29 09:50
Threat categories
| TL | Role | Category | Details |
|---|
| 40 |
src |
scan |
|
| 25 |
src |
— |
|
- DShield reports (IP summary, reports)
- 2026-03-03
- Number of reports: 10
- Distinct targets: 7
- 2026-03-17
- Number of reports: 12
- Distinct targets: 8
- 2026-03-19
- Number of reports: 15
- Distinct targets: 9
- 2026-03-21
- Number of reports: 18
- Distinct targets: 11
- 2026-03-30
- Number of reports: 15
- Distinct targets: 9
- 2026-03-31
- Number of reports: 15
- Distinct targets: 9
- 2026-04-01
- Number of reports: 10
- Distinct targets: 6
- 2026-04-02
- Number of reports: 10
- Distinct targets: 6
- 2026-04-03
- Number of reports: 14
- Distinct targets: 8
- 2026-04-04
- Number of reports: 15
- Distinct targets: 9
- 2026-04-05
- Number of reports: 11
- Distinct targets: 7
- 2026-04-07
- Number of reports: 12
- Distinct targets: 8
- 2026-04-09
- Number of reports: 17
- Distinct targets: 10
- 2026-04-10
- Number of reports: 16
- Distinct targets: 10
- 2026-04-14
- Number of reports: 19
- Distinct targets: 8
- 2026-04-15
- Number of reports: 19
- Distinct targets: 8
- 2026-04-22
- Number of reports: 12
- Distinct targets: 8
- 2026-04-26
- Number of reports: 12
- Distinct targets: 7
- 2026-04-27
- Number of reports: 12
- Distinct targets: 7
- Origin AS
- AS136180 - IPIP-CN
- BGP Prefix
- 103.203.56.0/24
- geo
-
China
- 🕑 Asia/Shanghai
- hostname
- scan-56-2.security.ipip.net
- hostname_class
- ['research_scanner', 'ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 103.203.56.0 - 103.203.59.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 111
- Tags: –
- CPEs: cpe:/a:openbsd:openssh:7.4
- ts_added
- 2024-11-26 05:01:30.314000
- ts_last_update
- 2026-04-29 09:50:32.217000
Warden event timeline
DShield event timeline
Presence on blacklists
