HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

ASN=398722

96 unique IPs · 10.3K events · 1 countries · 1 ASNs

Activity · last 7d

2026-06-24: 269 events2026-06-25: 1.4K events2026-06-26: 1.5K events2026-06-27: 1.8K events2026-06-28: 1.4K events2026-06-29: 1.4K events2026-06-30: 1.4K events2026-07-01: 1.2K events

peak 1.8K on 2026-06-27

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP2222/SSHGET /favicon.ico
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
3.6K · 96 IPs199.45.154.125 →
HTTP2222/SSHGET /2.4K · 96 IPs199.45.154.125 →
TLS2222/SSH50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)1.2K · 96 IPs199.45.154.125 →
HTTP10443GET /security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
215 · 86 IPs199.45.154.141 →
HTTP6697GET /sitemap.xml
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
212 · 90 IPs199.45.154.131 →
HTTP1913GET /login
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
201 · 86 IPs199.45.154.126 →
HTTP2222/SSHGET /.well-known/security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
200 · 83 IPs199.45.154.125 →
HTTP88GET /robots.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
191 · 84 IPs199.45.155.89 →
HTTP1433/MSSQLGET /wiki
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
185 · 88 IPs199.45.155.69 →
-1963x� IBETH01N0_M30 · 25 IPs199.45.154.149 →
-20546� @G�25 · 21 IPs199.45.154.122 →
-1201��23 · 22 IPs199.45.154.119 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.