HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=196

6 unique IPs · 23 events · 4 countries · 3 ASNs

Activity · last 7d

2026-07-01: 5 events2026-07-02: 2 events2026-07-03: 16 events

peak 16 on 2026-07-03

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP196GET /
UA: curl/7.29.0
7 · 5 IPs101.36.97.172 →
-196�(r����|1101.36.97.172 →
-196 1101.36.97.172 →
TLS196t3 12.1.2 AS:2048 HL:191101.36.97.172 →
TPKT196TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 00 00 00 001101.36.97.172 →
RDP196*%�Cookie: mstshash=nmap 1101.36.97.172 →
-196AMQP 1101.36.97.172 →
-196�����179.164.41.168 →
-196PRI * HTTP/2.0 SM 1101.36.97.172 →
SOCKS5196SOCKS505 01 00179.164.41.168 →
HTTP196OPTIONS /1101.36.97.172 →
-1960d 0a 0d 0a1101.36.97.172 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.