iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
ASN=14956
13 unique IPs · 193 events · 2 countries · 1 ASNs
Activity · last 7d
peak 63 on 2026-06-26
Top source networks · click to refine
ASN: 14956×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 9900 | GET /?format=json&showTrafficStats=yes UA: Mozilla/5.0 (PMTA-Auto) | 60 | 216.126.239.17 → |
| HTTP | 8317 | GET / UA: CLIProxyScanner/1.0 | 12 · 5 IPs | 167.88.165.96 → |
| - | 1723/PPTP | 00 9c 00 01 1a 2b 3c 4d 00 01 00 00 01 00 00 00 00 00 00 03 00 00 00 03 …(156 bytes) | 9 | 144.172.110.38 → |
| HTTP | 2083 | GET /.env UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 8 · 3 IPs | 107.189.18.71 → |
| HTTP | 2083 | GET /.env.local UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 7 · 2 IPs | 107.189.18.71 → |
| HTTP | 2083 | GET /.env.production UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 6 · 2 IPs | 107.189.18.71 → |
| - | 25565/Minecraft | /<HONEYPOT>c� | 6 | 144.172.104.239 → |
| - | 9401 | net.tcp://<HONEYPOT>:9401/ application/ssl-tls | 4 | 172.86.123.118 → |
| HTTP | 2083 | GET /.git/config UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 4 · 2 IPs | 107.189.18.71 → |
| HTTP | 2083 | GET /_cat/indices?v UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 3 | 107.189.18.71 → |
| HTTP | 2083 | GET /config/mail.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 3 | 107.189.18.71 → |
| HTTP | 2083 | GET /_profiler/phpinfo UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 3 | 107.189.18.71 → |
IPCountryASNTop portsEvents