RaqibCTI
IPSUSPICIOUS

20[.]2[.]140[.]201

Sourced from shodan-c2
Type
ip
Risk score
3 / 3
First seen
Last seen
2026-09-23

Passive DNS

Historical resolution (pDNS)
No passive-DNS enrichment
Historical resolution data is pending or unavailable for this indicator.

Infrastructure fingerprint

Censys
No infrastructure fingerprint
No Censys ASN, TLS/SSH, or open-port fingerprint recorded for this indicator.

Historical hosting pivot

Validin
Co-resolved domains (33)
hkmc[.]shop, hsbc[.]beer, www[.]hsbc[.]beer, www[.]hkmc[.]shop, myconnect[.]ubphk[.]org, ubphk[.]org, pc[.]ubphk[.]org, subdomainhere[.]ubphk[.]org, hkrnc[.]com, cyberarkhk[.]com, citibank[.]fit, www[.]citibank[.]fit, citibank[.]baby, www[.]citibank[.]baby, www[.]cyberarkhk[.]com, www[.]hkrnc[.]com, web[.]cyberarkhk[.]com, web[.]web[.]cyberarkhk[.]com, www[.]web[.]cyberarkhk[.]com, log[.]cyberarkhk[.]com, www[.]ian[.]cyberarkhk[.]com, login[.]cyberarkhk[.]com, ms[.]cyberarkhk[.]com, ian[.]cyberarkhk[.]com, web[.]login[.]cyberarkhk[.]com, o[.]cyberarkhk[.]com, web[.]o[.]cyberarkhk[.]com, account[.]web[.]cyberarkhk[.]com, login[.]ian[.]cyberarkhk[.]com, account[.]cyberarkhk[.]com, static[.]web[.]cyberarkhk[.]com, m[.]web[.]cyberarkhk[.]com, login[.]web[.]cyberarkhk[.]com

ThreatMiner

No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.