HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=12395

11 unique IPs · 15 events · 4 countries · 6 ASNs

Activity · last 7d

2026-06-18: 2 events2026-06-19: 2 events2026-06-20: 4 events2026-06-23: 6 events2026-06-24: 1 events

peak 6 on 2026-06-23

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP12395GET /
UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
10 · 10 IPs71.6.146.185 →
HTTP12395GET /favicon.ico
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
3 · 3 IPs71.6.146.185 →
RDP12395/*�Cookie: mstshash=Administr 2185.196.220.133 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.