HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: asn:51852

6 unique IPs · 1.4K events · 1 countries · 1 ASNs

Activity · last 7d

2026-06-14: 4 events2026-06-15: 956 events2026-06-16: 16 events2026-06-17: 142 events2026-06-18: 4 events2026-06-19: 150 events2026-06-20: 142 events2026-06-21: 14 events

peak 956 on 2026-06-15

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP444GET /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
79 · 2 IPs179.43.163.26 →
-829138 01 00 36 4d 32 05 00 ff 01 06 00 ff 09 01 07 00 ff 09 01 22 00 00 21 …(58 bytes)18179.43.186.241 →
HTTP8443/HTTPS-altGET /.env
UA: Go-http-client/1.1
17 · 4 IPs179.43.163.26 →
HTTP2083GET /login
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
15179.43.163.26 →
HTTP8443/HTTPS-altGET /.env.development
UA: Go-http-client/1.1
11 · 3 IPs179.43.163.26 →
HTTP8443/HTTPS-altGET /.env.local
UA: Go-http-client/1.1
11 · 3 IPs179.43.163.26 →
HTTP8443/HTTPS-altGET /.env.production
UA: Go-http-client/1.1
11 · 3 IPs179.43.163.26 →
HTTP8443/HTTPS-altGET /.env.backup
UA: Go-http-client/1.1
9 · 3 IPs179.43.163.26 →
HTTP443/HTTPSGET /shared/.env.dev
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
7 · 2 IPs179.43.146.227 →
HTTP443/HTTPSGET /shared/.env.live
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
7 · 2 IPs179.43.146.227 →
HTTP443/HTTPSGET /app/.env.bak
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
7 · 2 IPs179.43.146.227 →
HTTP443/HTTPSGET /www/.env.local
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
7 · 2 IPs179.43.146.227 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.