iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
ASN=12989
7 unique IPs · 913 events · 2 countries · 1 ASNs
Activity · last 7d
peak 152 on 2026-06-25
Top source networks · click to refine
ASN: 12989×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 7989 | GET / UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 | 367 · 6 IPs | 86.54.31.34 → |
| HTTP | 7989 | GET /favicon.ico UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 | 363 · 6 IPs | 86.54.31.34 → |
| TLS | 4064 | 0a | 41 · 3 IPs | 86.54.31.32 → |
| HTTP | 80/HTTP | GET /sitemap.xml | 7 · 4 IPs | 86.54.31.40 → |
| HTTP | 80/HTTP | GET /robots.txt | 7 · 4 IPs | 86.54.31.40 → |
| HTTP | 80/HTTP | GET /.well-known/security.txt | 7 · 4 IPs | 86.54.31.40 → |
| SOCKS5 | 11288 | SOCKS505 01 00 0a | 5 · 2 IPs | 86.54.31.34 → |
| - | 25565/Minecraft | 5 · 2 IPs | 86.54.31.32 → | |
| MQTT | 8883 | MQTT < mqtt | 4 | 86.54.31.32 → |
| - | 21379 | 12 34 00 00 00 3c 00 00 00 03 ab cd 00 03 00 02 00 00 00 05 57 00 49 00 …(60 bytes) | 4 · 2 IPs | 86.54.31.32 → |
| - | 25565/Minecraft | � <HONEYPOT>c� | 4 | 2.59.21.51 → |
| - | 1025 | �? U� | 4 · 2 IPs | 86.54.31.34 → |
IPCountryASNTop portsEvents