HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors · live query

Edit and re-run: add AND country:NL, OR port:3389, NOT tag:scanner  ·  full syntax

16 unique IPs · 81 events · 8 countries · 13 ASNs

Activity · last 7d

2026-07-04: 3 events2026-07-05: 13 events2026-07-06: 19 events2026-07-07: 4 events2026-07-08: 1 events2026-07-09: 28 events2026-07-10: 13 events

peak 28 on 2026-07-09

Top source networks · click to refine

Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP7860GET /api/tags
UA: curl/7.0
12109.69.19.248 →
HTTP7860POST /api/v1/auto_login
UA: Go-http-client/1.1
12185.242.3.5 →
HTTP7860POST /api/v1/validate/code
UA: Go-http-client/1.1
9 · 2 IPs185.242.3.5 →
HTTP7860GET /
UA: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)
9 · 5 IPs31.14.32.6 →
HTTP7860GET /health
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
6192.142.28.77 →
HTTP7860GET /queue/status
UA: Umai-Scanner/2.0 (+https://umai.entelijan.com/methodology)
5 · 2 IPs104.243.35.45 →
HTTP7860GET /config
UA: Umai-Scanner/2.0 (+https://umai.entelijan.com/methodology)
5 · 2 IPs104.243.35.45 →
RDP7860/*�Cookie: mstshash=Administr 445.141.233.117 →
HTTP7860GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
3 · 2 IPs167.99.177.247 →
HTTP7860GET /api/v1/version2213.199.51.220 →
HTTP7860GET /sitemap.xml
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
2150.107.36.236 →
HTTP7860GET /.well-known/security.txt
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
2150.107.36.236 →
IPCountryASNTop portsEvents
Showing top 50 by event count over the last 7d. Country, ASN and port cells narrow this query; any IP opens its full report scoped to it.