HoneyLabs
Lookup
Explore
CVEsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / Enrich
DocsBlog
Dashboard
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

country=KR

331 unique IPs · 104.2K events · 1 countries · 23 ASNs

Activity · last 7d

2026-06-24: 179 events2026-06-25: 87.8K events2026-06-26: 389 events2026-06-27: 169 events2026-06-28: 186 events2026-06-29: 13.9K events2026-06-30: 1.4K events2026-07-01: 160 events

peak 87.8K on 2026-06-25

Top source networks · click to refine

AS396982 Google LLC97.8%
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT1.6%
AS4766 Korea Telecom0.2%
AS17858 LG POWERCOMM0.1%
country: KR×window1h24h7d30d🔒90d🔒
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP1702GET /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Ed…
476 · 169 IPs152.32.243.98 →
HTTP7676GET /config.json
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36
252 · 38 IPs8.230.6.46 →
RDP17023.�Cookie: mstshash=Administrator 232 · 18 IPs152.32.243.98 →
TPKT1702TPKT / COTP (ISO-TSAP)03 00 00 0b 06 e0 00 00 00 00 00232 · 18 IPs152.32.243.98 →
HTTP1702GET /robots.txt
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Ed…
230 · 18 IPs152.32.243.98 →
HTTP1702GET /favicon.ico
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Ed…
229 · 18 IPs152.32.243.98 →
HTTP1702GET /sitemap.xml
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Ed…
227 · 18 IPs152.32.243.98 →
HTTP7008GET /v2/.git/config
UA: Mozilla/5.0 (Linux; U; Android 2.0.1; de-de; Milestone Build/SHOLS_U2_01.14.0) AppleWebKit/530.17 (KHTML, like Gecko) Ve…
83 · 57 IPs34.158.219.219 →
HTTP7008GET /admin/.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36
83 · 57 IPs34.158.219.219 →
HTTP7008GET /v1/.git/config
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobi…
83 · 57 IPs34.158.219.219 →
HTTP7008GET /www/.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36
83 · 57 IPs34.158.219.219 →
HTTP7008GET /wordpress/.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36
83 · 57 IPs34.158.219.219 →
IPCountryASNTop portsEvents
34.158.194.225225.194.158.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC998074.1K
34.50.18.1313.18.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC889813.2K
34.50.50.4343.50.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC88 4200854
8.230.6.4646.6.230.8.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC7002 7676854
34.47.86.254254.86.47.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9980430
34.22.84.156156.84.22.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC49153429
34.22.82.4040.82.22.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8898427
34.50.5.116116.5.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC27018/MongoDB427
34.50.54.174174.54.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8080/HTTP-alt427
34.64.58.156156.58.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC6060427
34.50.28.146146.28.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8150427
34.50.29.22.29.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC82427
34.50.56.222222.56.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9443427
34.64.190.123123.190.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9989427
8.230.4.1919.4.230.8.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC2443427
34.158.205.232232.205.158.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8900427
34.50.53.147147.53.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC7171406
34.64.153.6060.153.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8161/ActiveMQ405
34.22.95.204204.95.22.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC27017/MongoDB400
8.230.18.150150.18.230.8.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8200392
34.50.46.5959.46.50.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC6001357
34.64.40.243243.40.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC3002 9980332
34.64.162.135135.162.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9900 8150332
34.22.83.7171.83.22.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8070 8260332
34.47.71.4242.71.47.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC3306/MySQL294
34.64.136.117117.136.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC16686192
152.32.243.98🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT50503 10180 30097 18081 1043189
152.32.139.190iafrssh.cn🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT12380 18170 19727 1809 30166185
101.36.114.222🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT28426 1064 106 30710 18307173
34.158.212.3131.212.158.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8383170
8.230.16.7676.16.230.8.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC554168
34.47.100.238238.100.47.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9001/Tor166
34.64.121.1111.121.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8070166
34.64.207.129129.207.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8090166
101.36.114.209🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT30198 30159 11382 60156 18002166
34.64.93.188188.93.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC82166
34.47.107.5656.107.47.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC6443/k8s API166
34.64.63.66.63.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC6443/k8s API166
34.64.96.142142.96.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9004166
34.47.110.5555.110.47.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9500166
34.158.194.184184.194.158.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC9010166
34.64.248.105105.248.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC55000 6080 2000 8040 9009150
101.36.114.124🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT10056 60135 2345 18764 30215149
118.193.68.150🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT28431 3180 1194/OpenVPN 18090 19135
152.32.139.96klnorrx.cn🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT10165 12208 10192 10295 11128135
152.32.243.245🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT10506 10960 60082 10851 12392128
152.32.139.9🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT16690 11160 1194/OpenVPN 28888 28961116
101.36.114.198xunmou.cn🇰🇷KRAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMIT11481 11371 1117 1088 5632112
34.64.173.191191.173.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC8800 60000 8089/Splunk91
34.64.43.232232.43.64.34.bc.googleusercontent.com🇰🇷KRAS396982 Google LLC30000 9500 816090
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.