iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
port=502
20 unique IPs · 55 events · 4 countries · 8 ASNs
Activity · last 24h
peak 31 on 2026-07-03
Top source networks · click to refine
port: 502×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 502 | GET /favicon.ico UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 13 · 5 IPs | 167.94.146.62 → |
| HTTP | 502 | GET / | 12 · 7 IPs | 167.94.146.62 → |
| - | 502 | ZG + | 11 · 11 IPs | 13.89.124.208 → |
| TLS | 502 | 50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes) | 4 · 4 IPs | 167.94.146.62 → |
| - | 502 | 7 + | 4 · 4 IPs | 205.210.31.79 → |
| HTTP | 502 | GET /wiki UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 3 · 3 IPs | 167.94.146.62 → |
| - | 502 | + | 1 | 51.158.23.183 → |
| HTTP | 502 | GET /robots.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 1 | 167.94.146.51 → |
| - | 502 | MGLNDD_<HONEYPOT>_502 | 1 | 13.89.124.208 → |
| Redis | 502 | Redis (RESP)2a ba 00 00 00 05 00 2b 0e 01 00 | 1 | 8.216.5.206 → |
| HTTP | 502 | GET /s05hhyk391 UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 1 | 167.94.146.59 → |
| HTTP | 502 | GET /qvrzj8n9pi5lo UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 1 | 167.94.146.51 → |
IPCountryASNTop portsEvents