iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: port:445
2.3K unique IPs · 26.4K events · 110 countries · 821 ASNs
Activity · last 7d
peak 6.9K on 2026-06-15
Top source networks · click to refine
query: port:445×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| - | 445/SMB | E�SMBr � �� " NT LM 0.12 SMB 2.002 SMB 2.??? | 4.1K · 37 IPs | 189.130.154.57 → |
| - | 445/SMB | ��SMBr S� �� @ b PC NETWORK PROGRAM 1.0 LANMAN1.0 Windows for Workgroups 3.1a LM1.2X002 LANMAN2.1 NT LM 0.12 | 2.6K · 1.6K IPs | 42.112.40.115 → |
| - | 445/SMB | T�SMBr ( /K �^ 1 LANMAN1.0 LM1.2X002 NT LANMAN 1.0 NT LM 0.12 | 2.6K · 1.6K IPs | 42.112.40.115 → |
| - | 445/SMB | 00 00 00 63 ff 53 4d 42 73 00 00 00 00 18 01 20 00 00 00 00 00 00 00 00 …(103 bytes) | 2.6K · 1.6K IPs | 42.112.40.115 → |
| - | 445/SMB | 00 00 00 88 ff 53 4d 42 73 00 00 00 00 18 07 c0 00 00 00 00 00 00 00 00 …(140 bytes) | 2.6K · 1.6K IPs | 42.112.40.115 → |
| - | 445/SMB | 00 00 00 5c ff 53 4d 42 75 00 00 00 00 18 07 c0 00 00 00 00 00 00 00 00 …(96 bytes) | 2.5K · 1.6K IPs | 42.112.40.115 → |
| - | 445/SMB | 00 00 00 4e ff 53 4d 42 32 00 00 00 00 18 07 c0 00 00 00 00 00 00 00 00 …(82 bytes) | 2.4K · 1.5K IPs | 42.112.40.115 → |
| - | 445/SMB | 00 00 00 4a ff 53 4d 42 25 00 00 00 00 18 01 28 00 00 00 00 00 00 00 00 …(78 bytes) | 2.4K · 1.5K IPs | 42.112.40.115 → |
| HTTP | 445/SMB | GET / | 231 · 86 IPs | 66.132.186.164 → |
| - | 445/SMB | 00 00 00 2f ff 53 4d 42 72 00 00 00 00 18 43 c8 00 00 00 00 00 00 00 00 …(51 bytes) | 107 · 78 IPs | 66.132.186.164 → |
| - | 445/SMB | 00 00 00 66 fe 53 4d 42 40 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 …(106 bytes) | 90 · 61 IPs | 184.105.139.69 → |
| HTTP | 445/SMB | GET /favicon.ico UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 81 · 44 IPs | 91.231.89.157 → |
IPCountryASNTop portsEvents
122.176.153.133abts-north-dynamic-133.153.176.122.airtelbroadband.in🇮🇳INAS24560 Bharti Airtel Ltd., Telemedia Services445/SMB56
177.36.213.199customer-177-36-213-199.conectv.com.br🇧🇷BRAS52967 NT Brasil Tecnologia Ltda. ME445/SMB56
125.31.42.106n12531z42l106.static.ctmip.net🇲🇴MOAS4609 Companhia de Telecomunicacoes de Macau S445/SMB56
223.207.217.40mx-ll-223.207.217-40.dynamic.3bb.co.th🇹🇭THAS45758 Triple T Broadband Public Company Limite445/SMB48
186.248.88.170BHE088170.CORP.atcmultimidia.com.br🇧🇷BRAS23106 AMERICAN TOWER DO BRASIL-COMUNICACAO MUL445/SMB48
178.126.55.54mm-54-55-126-178.vitebsk.dynamic.pppoe.byfly.by🇧🇾BYAS6697 Republican Unitary Telecommunication Ent445/SMB40