iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
port=53
269 unique IPs · 55.0K events · 23 countries · 43 ASNs
Activity · last 7d
peak 46.0K on 2026-07-01
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| - | 53/DNS | ��� | 341 · 2 IPs | 179.6.28.101 → |
| HTTP | 53/DNS | GET / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 306 · 179 IPs | 34.52.229.150 → |
| - | 53/DNS | ���� | 129 · 2 IPs | 179.6.28.101 → |
| - | 53/DNS | 0d 0a 0d 0a | 80 · 36 IPs | 35.187.65.128 → |
| HTTP | 53/DNS | GET /favicon.ico UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 63 · 58 IPs | 27.19.239.216 → |
| - | 53/DNS | ����� | 58 · 2 IPs | 179.6.28.101 → |
| - | 53/DNS | 48 · 44 IPs | 35.187.65.128 → | |
| - | 53/DNS | 00 1e 00 06 01 00 00 01 00 00 00 00 00 00 07 76 65 72 73 69 6f 6e 04 62 …(32 bytes) | 48 · 44 IPs | 35.187.65.128 → |
| - | 53/DNS | ������ | 27 · 2 IPs | 179.6.28.101 → |
| - | 53/DNS | MGLNDD_<HONEYPOT>_53 | 19 · 19 IPs | 135.237.127.94 → |
| - | 53/DNS | 00 1e fc 2d 00 00 00 01 00 00 00 00 00 00 07 76 65 72 73 69 6f 6e 04 62 …(32 bytes) | 15 · 13 IPs | 94.231.206.157 → |
| HTTP | 53/DNS | GET /robots.txt UA: Go-http-client/1.1 | 14 · 14 IPs | 101.36.127.85 → |
IPCountryASNTop portsEvents