Observed 4 times. Targeted ports: 80. Country: Singapore.
honeypot · historical
First observed Sep 16, 2026 · Last observed Sep 16, 2026
Reported source: tpot-honeypot
222.167.32.209
IPv4AS13335 · CLOUDFLARENET - Cloudflare, Inc., US · 222.167.32.0/22 · SG registry
What sources report
1 accessible sourceSource descriptions describe reported observations. They are not a CTIDAO verdict.
DNS history
1 observed relationships
- undefined.hostname.localhost → 222.167.32.209Last observed November 2026
Exposure
4 observed services · stale snapshot
2000/tcp · httpLast observed open Sep 18, 2026
8888/tcp · httpLast observed open Sep 18, 2026
9090/tcp · httpLast observed open Sep 21, 2026
Recorded observations do not establish that a port is open now.
Network
AS13335 · 222.167.32.0/22
Popularity
Not present in the current list
Popularity is neutral context, not threat evidence.
Use the evidence tabs to inspect complete observations and follow related entities. An absence of observations does not establish safety.
Public feed matches
Honeypot infrastructure watch9/16/2026, 11:41:59 AM
Honeypot infrastructure watch: Observed 4 times. Targeted ports: 80. Country: Singapore.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 222.167.32.209 | ip | honeypot, historical | 2026-09-16 11:41:59 | |
Honeypot infrastructure watch: Observed 4 times. Targeted ports: 80. Country: Singapore. | ||||
DNS history
1 observations
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| undefined.hostname.localhost | 222.167.32.209 | Nov 2026First seen: Nov 2026 | 1 | CTIDAO DNS |
Nov 20261 hits · CTIDAO DNS
Record details
A · First seen Nov 2026
Network ownership
BGP origin and registry data from Team Cymru.
Origin ASN
AS13335
BGP prefix
222.167.32.0/22
Registry country
SG
CLOUDFLARENET - Cloudflare, Inc., US
Registry country is RIR assignment data, not IP geolocation.
Checked 11/6/2026, 12:37:12 AM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
4 observed servicesNewest observation Sep 22, 2026
| Port | Transport | Service | Product | Last observed open |
|---|---|---|---|---|
| 2000 | tcp | http | nginx | Sep 18, 2026 |
| 8888 | tcp | http | nginx | Sep 18, 2026 |
| 9090 | tcp | http | nginx | Sep 21, 2026 |
| 9102 | tcp | jetdirect | — | Sep 22, 2026 |
2000/tcphttp
nginx
Last observed open Sep 18, 2026
8888/tcphttp
nginx
Last observed open Sep 18, 2026
9090/tcphttp
nginx
Last observed open Sep 21, 2026
9102/tcpjetdirect
Last observed open Sep 22, 2026
Public preview is limited to five services and excludes banners. Account research on this IP entity includes every cached service, exact timestamps, banners, and enrichment summaries.
Account research
Take this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.