iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors · live query
11 unique IPs · 23 events · 3 countries · 4 ASNs
Activity · last 7d
peak 8 on 2026-07-08
Top source networks · click to refine
port: 20141×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 20141 | GET /favicon.ico UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 7 · 5 IPs | 91.231.89.215 → |
| HTTP | 20141 | GET / UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 6 · 5 IPs | 91.231.89.139 → |
| RDP | 20141 | /*� Cookie: mstshash=Administr | 3 | 45.141.233.117 → |
| - | 20141 | �<HONEYPOT>N� | 2 | 151.241.119.113 → |
| - | 20141 | 2 | 151.241.119.113 → | |
| HTTP | 20141 | GET /8umai81gn1 UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 1 | 167.94.146.61 → |
| HTTP | 20141 | GET /.well-known/security.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 1 | 167.94.146.61 → |
| TLS | 20141 | 50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes) | 1 | 167.94.146.61 → |
IPCountryASNTop portsEvents