iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors · live query
567 unique IPs · 17.8K events · 15 countries · 20 ASNs
Activity · last 7d
peak 3.1K on 2026-07-23
Top source networks · click to refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 37625 | GET / UA: Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info) | 8.8K · 547 IPs | 162.217.100.41 → |
| HTTP | 37625 | GET /favicon.ico UA: Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info) | 5.0K · 25 IPs | 162.217.100.41 → |
| HTTP | 8715 | GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 | 3.3K · 4 IPs | 5.187.35.142 → |
| HTTP | 1187 | GET /get_info UA: curl/7.61.1 | 456 · 102 IPs | 104.152.52.55 → |
| HTTP | 30045 | GET /cdn-cgi/trace UA: Mozilla/5.0 | 236 | 80.87.206.227 → |
| HTTP | 443/HTTPS | GET /Dr0v UA: - | 28 | 185.12.59.118 → |
| HTTP | 80/HTTP | GET /.env UA: internal-scan/1.0 | 17 · 9 IPs | 34.125.19.27 → |
| HTTP | 80/HTTP | GET /.git/config UA: Mozilla/5.0 (compatible; Scanner/1.0) | 10 · 2 IPs | 109.123.234.206 → |
| HTTP | 443/HTTPS | GET /dns-query?name=1.odns.m.dnsmeasure.top&type=A UA: Go-http-client/1.1 | 4 · 2 IPs | 47.89.154.16 → |
| HTTP | 443/HTTPS | GET /query?name=1.odns.m.dnsmeasure.top&type=A UA: Go-http-client/1.1 | 4 · 2 IPs | 47.89.154.16 → |
| HTTP | 3000/Web-alt | GET /api/subs UA: Mozilla/5.0 | 4 | 124.224.82.184 → |
| HTTP | 443/HTTPS | GET /resolve?name=1.odns.m.dnsmeasure.top&type=A UA: Go-http-client/1.1 | 4 · 2 IPs | 47.89.154.16 → |
IPCountryASNTop portsEvents