HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors · live query

Edit and re-run: add AND country:NL, OR port:3389, NOT tag:scanner  ·  full syntax

113 unique IPs · 159 events · 10 countries · 14 ASNs

Activity · last 7d

2026-07-14: 27 events2026-07-15: 14 events2026-07-16: 26 events2026-07-17: 23 events2026-07-18: 21 events2026-07-19: 24 events2026-07-20: 16 events2026-07-21: 8 events

peak 27 on 2026-07-14

Top source networks · click to refine

Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
-19999d�6Ld�ގd���d�wFd��d��Rd��Xd�\�d��d� �{d� �qd� X�d� 2ed� ڧd���d�sod��d��)d…106 · 92 IPs66.132.186.162 →
-20000d D|����O�8 · 7 IPs91.230.168.1 →
-20000d�6Ld�ގd���d�wFd��d��Rd��Xd�\�d��d� �{d� �qd� X�d� 2ed� ڧd���d�sod��d��)d…6 · 6 IPs123.58.217.155 →
-2000005 64 05 c9 00 00 00 00 36 4c 05 64 05 c9 01 00 00 00 de 8e 05 64 05 c9 …(1010 bytes)4 · 4 IPs165.154.100.58 →
-2000005 64 05 c9 00 00 00 00 36 4c 05 64 05 c9 01 00 00 00 de 8e 05 64 05 c9 …(1052 bytes)4 · 4 IPs165.154.100.58 →
-2000005 64 05 c9 00 00 00 00 36 4c 05 64 05 c9 01 00 00 00 de 8e 05 64 05 c9 …(1010 bytes)4185.242.226.58 →
-20000d�)�xd�*�rd�+o�d�,fd�-��d�.��d�/Dld�0&�d�1�*d�2�2 · 2 IPs45.156.129.73 →
-20000d�ގd���d�wFd��d��Rd��Xd�\�d��d� �{d� �q2 · 2 IPs45.156.129.73 →
-20000d�G2�d�Hw�d�I�}d�J�wd�K6�d�L\cd�M��d�N��d�Oid�P�2 · 2 IPs45.156.129.73 →
-20000d�Q�/d�R�%d�S>�d�TT1d�U��d�V��d�W;d�XPd�Y��d�Z��2 · 2 IPs45.156.129.73 →
-20000d�3g�d�4 4d�5��d�6��d�7L>d�8 d�9��d�:��d�;Hd�<"�2 · 2 IPs45.156.129.73 →
-20000d ���Ѥ��F��2 · 2 IPs45.156.129.73 →
IPCountryASNTop portsEvents
Showing top 50 by event count over the last 7d. Country, ASN and port cells narrow this query; any IP opens its full report scoped to it.