HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

ASN=201814

14 unique IPs · 813 events · 4 countries · 1 ASNs

Activity · last 7d

2026-06-24: 33 events2026-06-25: 117 events2026-06-26: 115 events2026-06-27: 111 events2026-06-28: 120 events2026-06-29: 117 events2026-06-30: 115 events2026-07-01: 85 events

peak 120 on 2026-06-28

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
-1�h�39295.214.53.196 →
-3128/HTTP-proxy��B��36995.214.53.196 →
TPKT27669TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 03 00 00 0035 · 9 IPs94.26.68.254 →
-9876��{"code":105,"extFields":{"Signature":"/u5P/wZUbhjanu4LM/UzEdo2u2I=","topic":"TBW102","AccessKey":"rocketmq2"},"flag":0,"language":"JAVA","opaque":1,"serializeTypeCurrentRPC…895.214.55.186 →
RDP3389/RDP+&�Cookie: mstshash=hello 7 · 3 IPs94.26.68.54 →
HTTP443/HTTPSGET /.claude/settings.local.json
UA: fasthttp
2194.180.48.253 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.