HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors · live query

Edit and re-run: add AND country:NL, OR port:3389, NOT tag:scanner  ·  full syntax

77 unique IPs · 148 events · 23 countries · 43 ASNs

Activity · last 7d

2026-07-07: 21 events2026-07-08: 16 events2026-07-09: 25 events2026-07-10: 17 events2026-07-11: 21 events2026-07-12: 26 events2026-07-13: 21 events2026-07-14: 1 events

peak 26 on 2026-07-12

Top source networks · click to refine

Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � �zQi��#�0�<.�Dhcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…147.252.16.44 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ǩs�蟣����,��Phcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange…183.168.106.26 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � �� _�9�\�L}i���hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…1104.236.83.40 →
SSH22/SSHSSH-2.0-libssh2_1.11.1 � ���pz}�^���3�Vhcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…189.252.146.72 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ��Y����@����dhcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…1148.66.142.9 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ��1tYnr-�kګ�hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchan…147.77.216.159 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ;y�'Q��6�9� ����hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…147.252.16.44 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ��2`��C��nR��hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…1157.173.104.13 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � ��G�[q��`�=�hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…147.252.16.44 →
SSH22/SSHSSH-2.0-libssh2_1.11.1 � 7���I�_,�b��s�hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…187.251.66.118 →
SSH22/SSHSSH-2.0-libssh2_1.11.1 � �M,�cW �GA��&FW�hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-excha…1152.32.174.171 →
SSH2222/SSHSSH-2.0-libssh2_1.11.1 � g�� E�Yr��ʭ�]hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchan…1104.236.83.40 →
IPCountryASNTop portsEvents
Showing top 50 by event count over the last 7d. Country, ASN and port cells narrow this query; any IP opens its full report scoped to it.