iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: asn:201814
21 unique IPs · 2.7K events · 4 countries · 1 ASNs
Activity · last 7d
peak 607 on 2026-06-15
Top source networks · click to refine
query: asn:201814×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| RDP | 60430 | /*� Cookie: mstshash=Administr | 1.8K · 4 IPs | 185.16.39.100 → |
| - | 3129 | ��B�� | 374 | 95.214.53.196 → |
| - | 3129 | �h� | 370 | 95.214.53.196 → |
| RDP | 3389/RDP | RDP (X.224)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 03 00 00 00 | 159 · 13 IPs | 109.205.211.117 → |
| HTTP | 443/HTTPS | GET /.git/config UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36 OPR/… | 6 | 194.180.48.34 → |
| - | 9876 | � �{"code":105,"extFields":{"Signature":"/u5P/wZUbhjanu4LM/UzEdo2u2I=","topic":"TBW102","AccessKey":"rocketmq2"},"flag":0,"language":"JAVA","opaque":1,"serializeTypeCurrentRPC… | 4 | 95.214.55.226 → |
| HTTP | 8081 | GET /config UA: Go-http-client/1.1 | 3 | 95.214.55.226 → |
| HTTP | 80/HTTP | POST /boaform/admin/formLogin UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 | 3 | 95.214.55.226 → |
| - | 8888/HTTP-alt | &action=challenge&user=admin' AND 1=1-- | 3 | 195.3.220.99 → |
| RDP | 3389/RDP | +&� Cookie: mstshash=hello | 3 | 94.26.68.55 → |
| HTTP | 443/HTTPS | GET /.git/credentials UA: Mozilla/3.01Gold (Win95; I) | 1 | 194.180.48.34 → |
IPCountryASNTop portsEvents