HTTP requests matched the web honeypot's suspicious-request rules.
ip-reputation · blocklist · fail2ban · honeypots · ssh · scanning · exploitation
First observed Sep 14, 2026 · Last observed Sep 14, 2026
Reported source: CTIDAO Blocklist Feed
109.70.100.12
IPv4AS208323 · APPLIEDPRIVACY-AS - Foundation for Applied Privacy, AT · 109.70.100.0/24 · AT registry
What sources report
2 accessible sourcesSource descriptions describe reported observations. They are not a CTIDAO verdict.
This source did not provide an event description.
honeypot · historical
First observed Mar 1, 2026 · Last observed Mar 1, 2026
Reported source: historical-api
DNS history
1 observed relationships
- tor-exit-anonymizer.appliedprivacy.net → 109.70.100.12Last observed November 2026
Exposure
Snapshot pending
Recorded observations do not establish that a port is open now.
Network
AS208323 · 109.70.100.0/24
Popularity
Not present in the current list
Popularity is neutral context, not threat evidence.
Use the evidence tabs to inspect complete observations and follow related entities. An absence of observations does not establish safety.
Public feed matches
CTIDAO Blocklist Feed9/14/2026, 10:22:33 AM
CTIDAO Blocklist Feed: HTTP requests matched the web honeypot's suspicious-request rules.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 109.70.100.12 | ip | ip-reputation, blocklist, fail2ban | 2026-09-14 10:22:33 | |
CTIDAO Blocklist Feed: HTTP requests matched the web honeypot's suspicious-request rules. | ||||
DNS history
3 observations
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| tor-exit-anonymizer.appliedprivacy.net | 109.70.100.12 | Nov 2026First seen: Sep 2026 | 3 | CTIDAO DNS |
Nov 20263 hits · CTIDAO DNS
Record details
A · First seen Sep 2026
Network ownership
BGP origin and registry data from Team Cymru.
Origin ASN
AS208323
BGP prefix
109.70.100.0/24
Registry country
AT
APPLIEDPRIVACY-AS - Foundation for Applied Privacy, AT
Registry country is RIR assignment data, not IP geolocation.
Checked 11/1/2026, 1:16:13 AM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
Exposure data is being refreshed.
Public preview is limited to five services and excludes banners. Account research on this IP entity includes every cached service, exact timestamps, banners, and enrichment summaries.
Account research
Take this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.