HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:83

281 unique IPs · 34.2K events · 22 countries · 41 ASNs

Activity · last 7d

2026-06-14: 31.5K events2026-06-15: 1.5K events2026-06-16: 209 events2026-06-17: 223 events2026-06-18: 197 events2026-06-19: 257 events2026-06-20: 222 events2026-06-21: 145 events

peak 31.5K on 2026-06-14

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP83GET /
UA: Python/3.10 aiohttp/3.8.4
588 · 188 IPs80.82.77.202 →
HTTP83GET /SDK/webLanguage
UA: Mozilla/5.0
552 · 6 IPs204.76.203.206 →
HTTP83GET /favicon.ico
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
119 · 84 IPs66.132.195.48 →
-830a29 · 9 IPs18.118.148.117 →
HTTP83GET http://api.ipify.org/?format=json
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3
24 · 20 IPs184.105.247.254 →
-83MGLNDD_<HONEYPOT>_8324 · 24 IPs135.119.89.140 →
TLS8350 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)13 · 13 IPs66.132.195.48 →
HTTP83GET /skin/default_1/images/logo.png
UA: Mozilla/5.0 (X11; Linux i386; U) Opera 7.60 [en-GB]
10 · 3 IPs194.114.136.5 →
HTTP83GET /nobody/favicon.ico
UA: Mozilla/5.0 (X11; Linux i386; U) Opera 7.60 [en-GB]
10 · 3 IPs194.114.136.5 →
HTTP83GET /login.rsp
UA: Mozilla/5.0 (X11; Linux i386; U) Opera 7.60 [en-GB]
10 · 3 IPs194.114.136.5 →
HTTP83GET /image/lgbg.jpg
UA: Mozilla/5.0 (X11; Linux i386; U) Opera 7.60 [en-GB]
9 · 3 IPs194.114.136.5 →
HTTP83TRACE / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.199 Safari/537.36 Accept-Encoding: gzip, deflate …85.61.209.92 →
IPCountryASNTop portsEvents
31.59.160.12🇦🇪AEunknown network83125
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.