Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 20, 2026
203.123.81.109
IPv4AS136907 · HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK · 203.123.80.0/20 · SG registry
DNS history
1 observed relationship
- ecs-203-123-81-109.compute.hwclouds-dns.com → 203.123.81.109 · Oct 1, 2026
Network
AS136907 · 203.123.80.0/20
Exposure
1 observed service · stale
Newest observation Oct 22, 2026
Popularity
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Public feed matches
Honeypot infrastructure watch10/20/2026, 5:21:00 AM
Observed 1 times. Targeted ports: 18014. Country: South Africa. Reputation: bad reputation.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 203.123.81.109 | ip | honeypot, historical | 2026-10-20 05:21:00 | |
Honeypot infrastructure watch: Observed 1 times. Targeted ports: 18014. Country: South Africa. Reputation: bad reputation. | ||||
DNS history
1 observations
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| ecs-203-123-81-109.compute.hwclouds-dns.com | 203.123.81.109 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
Oct 20261 hits · CTIDAO DNS
Record details
A · First seen Oct 2026
Network ownership
BGP origin and registry data from Team Cymru.
Origin ASN
AS136907
BGP prefix
203.123.80.0/20
Registry country
SG
HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK
Registry country is RIR assignment data, not IP geolocation.
Checked 10/20/2026, 5:21:56 AM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
1 observed servicesNewest observation Oct 22, 2026
| Port | Transport | Service | Product | Last observed open |
|---|---|---|---|---|
| 22 | tcp | ssh | OpenSSH | Oct 22, 2026 |
22/tcpssh
OpenSSH
Last observed open Oct 22, 2026
Public preview is limited to five services and excludes banners. Account research on this IP entity includes every cached service, exact timestamps, banners, and enrichment summaries.
Account research
Take this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.