HoneyLabs
LookupEnrichFeedsCVEsPayloadsCampaignsAEI IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: asn:4837

1.6K unique IPs · 2.2K events · 1 countries · 1 ASNs

Activity · last 7d

2026-06-10: 135 events2026-06-11: 265 events2026-06-12: 597 events2026-06-13: 281 events2026-06-14: 246 events2026-06-15: 256 events2026-06-16: 270 events2026-06-17: 114 events

peak 597 on 2026-06-12

Top source networks · click to refine

AS4837 CHINA UNICOM China169 Backbone100.0%
query: asn:4837×window1h24h7d30d🔒90d🔒
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP6467GET /1.1K · 1.0K IPs118.212.123.238 →
HTTP17877GET /favicon.ico
UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
383 · 378 IPs60.13.7.60 →
SSH22/SSHSSH-2.0-Go280 · 2 IPs125.39.148.106 →
FTP21/FTPUSER anonymous27 · 27 IPs116.172.201.24 →
Redis6379/Redis*1 $4 info20 · 7 IPs122.191.115.237 →
-1433/MSSQL10 01 00 a0 00 00 01 00 98 00 00 00 01 00 00 71 00 00 00 00 00 00 00 07 …(160 bytes)12123.138.18.10 →
HTTP52869POST /picdesc.xml
UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
11 · 7 IPs113.207.105.216 →
HTTP52869POST /wanipcn.xml
UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
11 · 7 IPs113.207.105.216 →
-489811 · 2 IPs221.198.98.146 →
-489811 · 2 IPs221.198.98.146 →
-3306/MySQLG�0~���10 · 10 IPs220.202.112.110 →
SOCKS549151SOCKS505 00 01 03 10 00 00 00 10 00 00 00 01 00 00 009 · 9 IPs123.191.151.132 →
IPCountryASNTop portsEvents
125.39.148.106no-data🇨🇳CNAS4837 CHINA UNICOM China169 Backbone22/SSH328
123.138.18.10🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL18
221.198.98.146www146.asd.tj.cn🇨🇳CNAS4837 CHINA UNICOM China169 Backbone48990 48991 489814
221.198.97.60www60.asd.tj.cn🇨🇳CNAS4837 CHINA UNICOM China169 Backbone48991 489928
122.97.179.25🇨🇳CNAS4837 CHINA UNICOM China169 Backbone445/SMB8
101.206.108.14🇨🇳CNAS4837 CHINA UNICOM China169 Backbone2376/Docker 6379/Redis 2375/Docker7
122.191.115.237🇨🇳CNAS4837 CHINA UNICOM China169 Backbone6379/Redis6
182.119.22.197hn.kd.ny.adsl🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL6
112.238.143.246🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL6
113.225.221.138🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL6
60.210.30.31🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL6
101.206.107.245🇨🇳CNAS4837 CHINA UNICOM China169 Backbone22/SSH 2222/SSH5
58.242.190.39🇨🇳CNAS4837 CHINA UNICOM China169 Backbone22/SSH5
123.128.33.43🇨🇳CNAS4837 CHINA UNICOM China169 Backbone528694
113.207.105.216🇨🇳CNAS4837 CHINA UNICOM China169 Backbone528694
61.242.178.28🇨🇳CNAS4837 CHINA UNICOM China169 Backbone6379/Redis4
218.59.175.217🇨🇳CNAS4837 CHINA UNICOM China169 Backbone6379/Redis4
175.43.47.86🇨🇳CNAS4837 CHINA UNICOM China169 Backbone528694
36.251.141.8🇨🇳CNAS4837 CHINA UNICOM China169 Backbone528694
111.166.86.239dns239.online.tj.cn🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
175.160.94.94🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
123.191.146.50🇨🇳CNAS4837 CHINA UNICOM China169 Backbone2983 264 5413
119.176.31.4🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
60.12.218.120🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
221.214.56.78🇨🇳CNAS4837 CHINA UNICOM China169 Backbone22/SSH3
119.180.26.144🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
60.255.229.249🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
124.128.247.169🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
220.202.112.110🇨🇳CNAS4837 CHINA UNICOM China169 Backbone5000/Web-alt 3306/MySQL 123693
112.224.142.115🇨🇳CNAS4837 CHINA UNICOM China169 Backbone55553
118.81.199.124124.199.81.118.adsl-pool.sx.cn🇨🇳CNAS4837 CHINA UNICOM China169 Backbone389/LDAP3
61.134.141.193🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
60.13.6.155🇨🇳CNAS4837 CHINA UNICOM China169 Backbone389/LDAP3
175.160.89.114🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
43.248.108.211🇨🇳CNAS4837 CHINA UNICOM China169 Backbone9200/Elastic 8030 123233
122.96.28.24🇨🇳CNAS4837 CHINA UNICOM China169 Backbone27017/MongoDB 2131 20863
220.202.112.199🇨🇳CNAS4837 CHINA UNICOM China169 Backbone10175 9418/Git 443/HTTPS3
124.130.250.231🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
221.0.197.202🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
43.248.191.210🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
171.37.200.215🇨🇳CNAS4837 CHINA UNICOM China169 Backbone1433/MSSQL3
182.119.224.128hn.kd.ny.adsl🇨🇳CNAS4837 CHINA UNICOM China169 Backbone61222 101332
43.248.108.2🇨🇳CNAS4837 CHINA UNICOM China169 Backbone11210 82002
43.248.108.111🇨🇳CNAS4837 CHINA UNICOM China169 Backbone9999 8888/HTTP-alt2
121.29.84.196🇨🇳CNAS4837 CHINA UNICOM China169 Backbone10305 60072
60.13.7.177🇨🇳CNAS4837 CHINA UNICOM China169 Backbone9998 270152
171.120.38.150🇨🇳CNAS4837 CHINA UNICOM China169 Backbone55555 112102
220.202.112.67🇨🇳CNAS4837 CHINA UNICOM China169 Backbone10077 8888/HTTP-alt2
43.248.108.232🇨🇳CNAS4837 CHINA UNICOM China169 Backbone873/Rsync 270062
43.248.108.22🇨🇳CNAS4837 CHINA UNICOM China169 Backbone4040 496712
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.