iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
port=28017
98 unique IPs · 1.2K events · 22 countries · 18 ASNs
Activity · last 7d
peak 962 on 2026-06-30
Top source networks · click to refine
port: 28017×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 28017 | GET / UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 61 · 46 IPs | 185.226.197.30 → |
| - | 28017 | ? <0 ����� admin.$cmd ���� buildinfo �? | 28 | 115.231.78.11 → |
| - | 28017 | MGLNDD_<HONEYPOT>_28017 | 24 · 24 IPs | 172.202.118.18 → |
| HTTP | 28017 | GET /favicon.ico UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 23 · 21 IPs | 185.226.197.28 → |
| HTTP | 28017 | GET /dashboard/.git/config UA: Mozilla/5.0 (Linux; Android 9; VOG-L09 Build/HUAWEIVOG-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.128 … | 9 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /blog/.git/config UA: WebZIP/3.5 (http://www.spidersoft.com) | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /public/.git/config UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36 | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /portal/.git/config UA: Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /htdocs/.git/config UA: Mozilla/5.0 (Linux; Android 10; Pixel 3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.3… | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /dist/.git/config UA: Mozilla/5.0 (Linux; Android 5.1.1; vivo Y31L.RastaMod™_Version) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.… | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /v3/.git/config UA: HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2… | 8 · 8 IPs | 34.84.251.123 → |
| HTTP | 28017 | GET /v1/.git/config UA: Mozilla/5.0 (Linux; Android 8.1.0; GM 6 d) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537… | 8 · 8 IPs | 34.84.251.123 → |
IPCountryASNTop portsEvents