HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:33

15 unique IPs · 3.5K events · 7 countries · 7 ASNs

Activity · last 7d

2026-06-14: 1 events2026-06-16: 4 events2026-06-17: 3.5K events2026-06-18: 3 events2026-06-19: 1 events2026-06-20: 1 events2026-06-21: 1 events

peak 3.5K on 2026-06-17

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
SSH33SSH-2.0-Go17103.158.206.141 →
HTTP33GET /
UA: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)
6 · 6 IPs85.217.140.36 →
TPKT33TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 02 00 00 004 · 3 IPs160.119.76.34 →
SSH33SSH-2.0-OpenSSH2143.198.134.9 →
RDP33/*�Cookie: mstshash=Administr 2194.116.236.22 →
HTTP33POST /wsman
UA: Microsoft WinRM Client
2104.152.52.225 →
SSH33SSH-2.0-Go l,:� z7�X�̟O�&�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-gr…1103.158.206.141 →
SSH33SSH-2.0-Go l?�k+�������v?�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH33SSH-2.0-Go l�����l^�VY��l �mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH33SSH-2.0-Go l������U�|ΐ�ё6�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-gro…1103.158.206.141 →
SSH33SSH-2.0-Go l e���Q�jZAE���mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH33SSH-2.0-Go l�o\wc0�L�P� e4o�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.