HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:42

37 unique IPs · 3.5K events · 11 countries · 12 ASNs

Activity · last 7d

2026-06-14: 1 events2026-06-15: 4 events2026-06-16: 5 events2026-06-17: 3.5K events2026-06-18: 9 events2026-06-19: 10 events2026-06-20: 11 events2026-06-21: 1 events

peak 3.5K on 2026-06-17

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
SSH42SSH-2.0-Go33103.158.206.141 →
HTTP42GET /
UA: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)
19 · 16 IPs85.217.149.58 →
SSH42SSH-2.0-ZGrab ZGrab SSH Survey12 · 10 IPs162.216.150.172 →
HTTP42GET /favicon.ico
UA: Go-http-client/1.1
6 · 6 IPs118.193.33.130 →
TPKT42TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 02 00 00 005 · 3 IPs160.119.76.34 →
HTTP42GET /robots.txt
UA: Go-http-client/1.1
2 · 2 IPs118.193.33.130 →
TPKT42TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 03 00 00 002 · 2 IPs40.81.200.172 →
SSH42SSH-2.0-Go l���W�'@�$,0��zg�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH42SSH-2.0-Go lT��E=�����bm�k�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH42SSH-2.0-Go l���{�H�c��©2��mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-gr…1103.158.206.141 →
SSH42SSH-2.0-Go l�/�JhR���-�����mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
SSH42SSH-2.0-Go l������{�� �Sp9R�mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-g…1103.158.206.141 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.