HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

ASN=51396

71 unique IPs · 13.7K events · 3 countries · 1 ASNs

Activity · last 7d

2026-06-24: 162 events2026-06-25: 530 events2026-06-26: 501 events2026-06-27: 441 events2026-06-28: 404 events2026-06-29: 427 events2026-06-30: 5.7K events2026-07-01: 5.5K events

peak 5.7K on 2026-06-30

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
SOCKS510057SOCKS505 01 005.5K · 18 IPs176.65.132.33 →
HTTP40004CONNECT proxy2.proxiesfood.com:443 HTTP/1.1 Host: proxy2.proxiesfood.com:4435.2K · 8 IPs204.76.203.213 →
SSH36363SSH-2.0-OpenSSH752 · 10 IPs176.65.149.27 →
HTTP8081GET /SDK/webLanguage
UA: Mozilla/5.0
619 · 3 IPs204.76.203.219 →
HTTP8000/HTTP-altCONNECT httpbin.org:443 HTTP/1.1 Host: httpbin.org:443 Proxy-Connection: keep-alive43045.135.193.193 →
HTTP8898GET http://proxy.flarevpn.digital:8080/judge
UA: Go-http-client/1.1
16845.135.194.113 →
HTTP80/HTTPGET /
UA: Mozilla/5.0 zgrab/0.x
106 · 9 IPs176.65.149.236 →
-8000/HTTP-altJDWP-Handshake76 · 3 IPs176.65.149.194 →
-2557062 · 2 IPs176.65.149.178 →
HTTP31280CONNECT api.ip.pn:443 HTTP/1.1 Host: api.ip.pn:443 User-Agent: Mozilla/5.0 Proxy-Connection: keep-alive52204.76.203.49 →
-25565/Minecraft50176.65.148.132 →
HTTP58080CONNECT checkip.amazonaws.com:80 HTTP/1.1 Host: checkip.amazonaws.com:80 Proxy-Connection: keep-alive Connection: close45176.65.148.147 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.