HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=2200

51 unique IPs · 90 events · 11 countries · 15 ASNs

Activity · last 7d

2026-06-28: 2 events2026-06-29: 15 events2026-06-30: 10 events2026-07-01: 4 events2026-07-02: 10 events2026-07-03: 6 events2026-07-04: 38 events2026-07-05: 5 events

peak 38 on 2026-07-04

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP2200GET /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
21 · 20 IPs35.203.210.61 →
SSH2200SSH-2.0-ZGrab ZGrab SSH Survey15 · 15 IPs35.203.210.19 →
HTTP2200GET /favicon.ico
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
8 · 8 IPs123.160.223.72 →
HTTP2200GET /.well-known/security.txt
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
3 · 3 IPs35.203.210.131 →
RDP2200/*�Cookie: mstshash=Administr 3 · 2 IPs192.253.248.180 →
SSH2200SSH-2.0-JSCH-0.1.54 � 1���/�cUc��cr��ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
SSH2200SSH-2.0-JSCH-0.1.54 � SG��Pb%��D*K �ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
SSH2200SSH-2.0-JSCH-0.1.54 � D��H_���S���V����ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
SSH2200SSH-2.0-JSCH-0.1.54 � �� ��UO�C�Q�%/�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
SSH2200SSH-2.0-JSCH-0.1.54 � �q/��V�N9��+�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
SSH2200SSH-2.0-JSCH-0.1.54 � b��,��,��$n�Hv��ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellm…1217.160.144.121 →
-2200�����179.164.41.168 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.