HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=38657

4 unique IPs · 12 events · 4 countries · 4 ASNs

Activity · last 7d

2026-06-24: 10 events2026-06-26: 1 events2026-06-30: 1 events

peak 10 on 2026-06-24

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP38657GET /favicon.ico
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
366.132.195.60 →
HTTP38657GET /266.132.195.60 →
-386570a2 · 2 IPs31.14.32.8 →
RDP38657/*�Cookie: mstshash=Administr 262.164.177.41 →
HTTP38657GET /n4ad8eh4b
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
166.132.195.60 →
HTTP38657GET /security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
166.132.195.60 →
TLS3865750 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)166.132.195.60 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.