HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors · live query

Edit and re-run: add AND country:NL, OR port:3389, NOT tag:scanner  ·  full syntax

Query did not run

asn must be an integer, got 'AS396982'

Fix it in the box above and press Run, or start from a working example below.

query syntax

field:value pairs combined with AND, OR, NOT and parentheses. Case-insensitive keywords.

port:445 · country:NL · asn:14061 · cidr:80.82.77.0/24 · proto:rdp · cve:CVE-2017-0144 · ja4:… · ja4h:… · ja3:… · hassh:… · domain:example.com · path:/wp-login.php · ua:zgrab · tag:scanner · header:x-forwarded-for · banner:SSH-2.0 · has:cert

Anonymous visitors can run single-field pivots; boolean and text queries need a free account. The examples above are pre-authorized for everyone.