HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=8429

32 unique IPs · 50 events · 9 countries · 14 ASNs

Activity · last 7d

2026-06-28: 4 events2026-06-29: 2 events2026-06-30: 5 events2026-07-01: 4 events2026-07-02: 6 events2026-07-03: 15 events2026-07-04: 10 events2026-07-05: 4 events

peak 15 on 2026-07-03

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8429GET /
UA: curl/7.61.1
27 · 22 IPs104.152.52.229 →
-8429�<HONEYPOT> �4 · 2 IPs151.240.63.161 →
-84294 · 2 IPs151.240.63.161 →
HTTP8429GET /favicon.ico
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
3 · 3 IPs47.251.89.134 →
HTTP8429GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0
35.187.35.142 →
SOCKS58429SOCKS505 03 00 01 022161.97.169.9 →
HTTP8429GET http://161.97.169.9:8899/verify2161.97.169.9 →
HTTP8429GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
2 · 2 IPs68.183.5.101 →
SOCKS58429SOCKS505 01 00179.164.41.168 →
-8429����q179.164.41.168 →
-8429�<HONEYPOT> �1151.240.63.161 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.