HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: ja4:t13i140900_cbb2034c60b8_e7c285222651

271 unique IPs · 5.2K events · 12 countries · 14 ASNs

Activity · last 7d

2026-06-14: 17 events2026-06-15: 36 events2026-06-16: 37 events2026-06-17: 142 events2026-06-18: 12 events2026-06-19: 28 events2026-06-20: 27 events2026-06-21: 4.9K events

peak 4.9K on 2026-06-21

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP3917GET /.well-known/security.txt
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4.9K · 253 IPs198.235.24.28 →
HTTP443/HTTPSGET /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
151 · 7 IPs45.148.10.67 →
HTTP7681GET /ws
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
35 · 4 IPs217.60.195.138 →
HTTP443/HTTPSPOST /
UA: Go-http-client/1.1
11 · 5 IPs47.89.154.16 →
HTTP443/HTTPSGET /robots.txt
UA: Mozilla/5.0 (compatible; FreePBX-Scanner/1.0)
8187.17.224.139 →
HTTP443/HTTPSGET /dns-query?name=1.odns.m.dnsmeasure.top&type=A
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSGET /query?name=1.odns.m.dnsmeasure.top&type=A
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSGET /?name=1.odns.m.dnsmeasure.top&type=A
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSGET /resolve?name=1.odns.m.dnsmeasure.top&type=A
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSPOST /dns-query
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSPOST /query
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
HTTP443/HTTPSPOST /resolve
UA: Go-http-client/1.1
8 · 4 IPs47.89.154.16 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.