HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors · live query

Edit and re-run: add AND country:NL, OR port:3389, NOT tag:scanner  ·  full syntax

1 unique IPs · 214 events · 1 countries · 1 ASNs

Top source networks · click to refine

Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
-65010����<HONEYPOT>��415.42.211.250 →
-25561����<HONEYPOT>c�85.42.211.250 →
-1001����<HONEYPOT>�65.42.211.250 →
-30107����<HONEYPOT>u�45.42.211.250 →
-25005����<HONEYPOT>a�45.42.211.250 →
-13002����<HONEYPOT>2�35.42.211.250 →
-27008����<HONEYPOT>i�35.42.211.250 →
-502����<HONEYPOT>�35.42.211.250 →
-53009����<HONEYPOT>�35.42.211.250 →
-5006����<HONEYPOT>�35.42.211.250 →
-23457����<HONEYPOT>[�35.42.211.250 →
-3009����<HONEYPOT> �35.42.211.250 →
IPCountryASNTop portsEvents
Showing top 50 by event count over the last 7d. Country, ASN and port cells narrow this query; any IP opens its full report scoped to it.