HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

tag=visionheight

42 unique IPs · 13.9K events · 1 countries · 1 ASNs

Activity · last 7d

2026-07-01: 6 events2026-07-02: 2.3K events2026-07-03: 1.3K events2026-07-04: 1.8K events2026-07-05: 3.7K events2026-07-06: 2.1K events2026-07-07: 1.5K events2026-07-08: 1.3K events

peak 3.7K on 2026-07-05

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP58000GET /
UA: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
11.6K · 42 IPs3.129.187.38 →
-580000a2.0K · 35 IPs3.129.187.38 →
RDP3389/RDP+&�Cookie: mstshash=zgrab 28 · 5 IPs18.116.101.220 →
-445/SMB00 00 00 2f ff 53 4d 42 72 00 00 00 00 18 43 c8 00 00 00 00 00 00 00 00 …(51 bytes)28 · 7 IPs3.129.187.38 →
-445/SMB00 00 00 66 fe 53 4d 42 40 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 …(106 bytes)28 · 7 IPs3.129.187.38 →
-502ZG+22 · 7 IPs18.116.101.220 →
HTTP631/IPPPOST /ipp
UA: Mozilla/5.0 zgrab/0.x
20 · 5 IPs3.129.187.38 →
-5432/Postgres�/18 · 3 IPs18.218.118.203 →
-27017/MongoDB3a 00 00 00 00 00 00 00 00 00 00 00 d4 07 00 00 00 00 00 00 61 64 6d 69 …(58 bytes)17 · 5 IPs3.17.72.108 →
-1521/Oraclem8, A ��3:AA(DESCRIPTION=(CONNECT_DATA=(CID=(PROGRAM=zgrab2))))17 · 4 IPs18.218.118.203 →
-1433/MSSQL/ !"&�16 · 5 IPs52.14.1.54 →
Redis6379/Redis*1 $4 QUIT14 · 4 IPs18.116.101.220 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.