HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

ASN=63949

209 unique IPs · 4.3K events · 7 countries · 1 ASNs

Activity · last 7d

2026-06-24: 136 events2026-06-25: 354 events2026-06-26: 156 events2026-06-27: 151 events2026-06-28: 182 events2026-06-29: 1.6K events2026-06-30: 1.3K events2026-07-01: 476 events

peak 1.6K on 2026-06-29

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP1988GET /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
999 · 177 IPs172.236.119.165 →
-50040d 0a 0d 0a135 · 61 IPs172.234.231.96 →
TLS3388HELP127 · 63 IPs192.155.81.39 →
HTTP3388OPTIONS / RTSP/1.0122 · 58 IPs192.155.81.39 →
HTTP3388OPTIONS /121 · 57 IPs192.155.81.39 →
TLS3388�(r����|121 · 56 IPs192.155.81.39 →
TLS338800 1e 00 06 01 00 00 01 00 00 00 00 00 00 07 76 65 72 73 69 6f 6e 04 62 …(32 bytes)119 · 56 IPs192.155.81.39 →
TLS3388 119 · 56 IPs192.155.81.39 →
TLS5004TLS/SSL16 03 00 00 53 01 00 00 4f 03 00 3f 47 d7 f7 ba 2c ee ea b2 60 7e f3 00 …(88 bytes)67 · 59 IPs172.234.231.96 →
TLS5004TLS/SSL16 03 00 00 69 01 00 00 65 03 03 55 1c a7 e4 72 61 6e 64 6f 6d 31 72 61 …(110 bytes)67 · 58 IPs172.234.231.96 →
RDP3388*%�Cookie: mstshash=beio 66 · 55 IPs192.155.81.39 →
TLS338844 6d 64 54 00 00 00 17 00 00 00 01 00 00 00 00 11 11 00 ff 01 ff 1364 · 53 IPs192.155.81.39 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.