HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: asn:174

19 unique IPs · 2.1K events · 1 countries · 1 ASNs

Activity · last 7d

2026-06-14: 51 events2026-06-15: 252 events2026-06-16: 305 events2026-06-17: 294 events2026-06-18: 310 events2026-06-19: 359 events2026-06-20: 219 events2026-06-21: 298 events

peak 359 on 2026-06-19

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP9918GET /
UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
1.0K · 10 IPs207.90.244.18 →
HTTP9918GET /favicon.ico
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
986 · 9 IPs207.90.244.18 →
HTTP52869POST /picdesc.xml
UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
24 · 4 IPs38.244.39.137 →
HTTP52869POST /wanipcn.xml
UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
23 · 4 IPs38.244.39.137 →
TLS443/HTTPS0a11 · 2 IPs207.90.244.28 →
HTTP443/HTTPSGET /robots.txt9 · 2 IPs207.90.244.28 →
HTTP443/HTTPSGET /sitemap.xml8 · 2 IPs207.90.244.28 →
HTTP443/HTTPSGET /.well-known/security.txt8 · 2 IPs207.90.244.28 →
-8000/HTTP-alt c3 · 2 IPs102.129.234.167 →
HTTP80/HTTPGET /.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36
2151.241.122.63 →
HTTP80/HTTPPOST /.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36
2151.241.122.63 →
HTTP8190GET /system_stats238.29.145.119 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.