IP address

Search at other sites:

.270103.54.57.8

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de bots

103.54.57.8 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-26 23:05:05.102000
Was present on blacklist at: 2026-02-25 05:05, 2026-02-25 11:05, 2026-02-25 17:05, 2026-02-25 23:05, 2026-02-26 05:05, 2026-02-26 11:05, 2026-02-26 17:05, 2026-02-26 23:05

DataPlane SIP query

103.54.57.8 is listed on the DataPlane SIP query blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SIP OPTIONS query to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 07:10:05.720000
Was present on blacklist at: 2026-02-28 03:10, 2026-02-28 07:10, 2026-02-28 15:10, 2026-02-28 19:10, 2026-03-01 03:10, 2026-03-01 07:10, 2026-03-01 15:10, 2026-03-01 19:10, 2026-03-02 03:10, 2026-03-02 07:10, 2026-03-02 15:10, 2026-03-02 19:10, 2026-03-03 03:10, 2026-03-03 07:10, 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-04 03:10, 2026-03-04 07:10

DataPlane SMTP greeting

103.54.57.8 is listed on the DataPlane SMTP greeting blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs that are<br>identified as SMTP clients issuing unsolicited HELO or EHLO commands.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 11:10:01.577000
Was present on blacklist at: 2026-02-28 03:10, 2026-02-28 07:10, 2026-02-28 11:10, 2026-02-28 15:10, 2026-02-28 19:10, 2026-02-28 23:10, 2026-03-01 03:10, 2026-03-01 07:10, 2026-03-01 11:10, 2026-03-01 15:10, 2026-03-01 19:10, 2026-03-01 23:10, 2026-03-02 03:10, 2026-03-02 07:10, 2026-03-02 11:10, 2026-03-02 15:10, 2026-03-02 19:10, 2026-03-02 23:10, 2026-03-03 03:10, 2026-03-03 07:10, 2026-03-03 11:10, 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-03 23:10, 2026-03-04 03:10, 2026-03-04 07:10, 2026-03-04 11:10

DataPlane TELNET login

103.54.57.8 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 07:10:01.430000
Was present on blacklist at: 2026-02-28 03:10, 2026-02-28 07:10, 2026-02-28 11:10, 2026-02-28 15:10, 2026-02-28 19:10, 2026-02-28 23:10, 2026-03-01 03:10, 2026-03-01 07:10, 2026-03-01 11:10, 2026-03-01 15:10, 2026-03-01 19:10, 2026-03-01 23:10, 2026-03-02 03:10, 2026-03-02 07:10, 2026-03-02 11:10, 2026-03-02 15:10, 2026-03-02 19:10, 2026-03-02 23:10, 2026-03-03 03:10, 2026-03-03 07:10, 2026-03-03 11:10, 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-03 23:10, 2026-03-04 03:10, 2026-03-04 07:10

Threat categories

TL	Role	Category	Details
43	src	scan

---

Warden events (174)

2026-04-02

ReconScanning (node.86eb21): 1

2026-03-30

ReconScanning (node.86eb21): 3

2026-03-29

ReconScanning (node.86eb21): 12

2026-03-28

ReconScanning (node.86eb21): 12

2026-03-27

ReconScanning (node.86eb21): 6

ReconScanning (node.f90c6b): 1

2026-03-26

ReconScanning (node.86eb21): 3

2026-03-25

ReconScanning (node.86eb21): 15

2026-03-24

ReconScanning (node.86eb21): 4

2026-03-16

ReconScanning (node.86eb21): 10

2026-03-15

ReconScanning (node.86eb21): 7

2026-03-14

IntrusionUserCompromise (node.cfb4f7): 2

ReconScanning (node.86eb21): 5

2026-03-13

ReconScanning (node.86eb21): 6

2026-03-11

ReconScanning (node.86eb21): 3

2026-03-10

ReconScanning (node.86eb21): 4

2026-03-09

ReconScanning (node.86eb21): 9

2026-03-08

ReconScanning (node.86eb21): 2

ReconScanning (node.f90c6b): 1

2026-03-07

ReconScanning (node.86eb21): 2

2026-03-06

ReconScanning (node.86eb21): 7

ReconScanning (node.f90c6b): 1

2026-03-05

ReconScanning (node.86eb21): 2

2026-03-04

ReconScanning (node.86eb21): 1

2026-03-03

ReconScanning (node.86eb21): 5

2026-03-02

ReconScanning (node.86eb21): 2

2026-02-28

ReconScanning (node.86eb21): 3

ReconScanning (node.f90c6b): 1

2026-02-27

ReconScanning (node.86eb21): 2

ReconScanning (node.f90c6b): 2

2026-02-26

ReconScanning (node.86eb21): 1

2026-02-25

ReconScanning (node.86eb21): 1

2026-02-24

ReconScanning (node.86eb21): 2

2026-02-22

ReconScanning (node.f90c6b): 1

2026-02-21

ReconScanning (node.86eb21): 7

ReconScanning (node.f90c6b): 1

2026-02-18

ReconScanning (node.86eb21): 2

2026-02-15

ReconScanning (node.86eb21): 1

2026-02-14

ReconScanning (node.86eb21): 5

2026-02-13

ReconScanning (node.86eb21): 2

2026-02-11

ReconScanning (node.86eb21): 6

2026-02-10

ReconScanning (node.86eb21): 2

2026-02-06

ReconScanning (node.f90c6b): 2

ReconScanning (node.86eb21): 2

2026-01-30

IntrusionUserCompromise (node.cfb4f7): 4

ReconScanning (node.86eb21): 1

Origin AS

AS36007 - KAMATERA

BGP Prefix

103.54.57.0/24

geo

United States, New York

🕑 America/New_York

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

103.54.56.0 - 103.54.59.255

last_activity

2026-04-02 07:55:23

last_warden_event

2026-04-02 07:55:23

rep

0.26982697986421134

reserved_range

0

Shodan's InternetDB

Open ports: 80, 5555

Tags: –

CPEs: cpe:/a:f5:nginx:1.29.5

ts_added

2026-01-30 04:35:37.714000

ts_last_update

2026-04-03 04:35:41.169000

Warden event timeline

DShield event timeline

Presence on blacklists