HoneyLabs
Lookup
Explore
CVEsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / Enrich
DocsBlog
Dashboard
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=555

60 unique IPs · 121 events · 10 countries · 17 ASNs

Activity · last 7d

2026-06-28: 23 events2026-06-29: 3 events2026-06-30: 15 events2026-07-01: 21 events2026-07-02: 10 events2026-07-03: 9 events2026-07-04: 32 events2026-07-05: 8 events

peak 32 on 2026-07-04

Top source networks · click to refine

AS8075 Microsoft Corporation38.8%
AS396982 Google LLC21.5%
AS398324 Censys, Inc.6.6%
AS213412 ONYPHE SAS5.0%
port: 555×window1h24h7d30d🔒90d🔒
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
-555MGLNDD_<HONEYPOT>_55524 · 23 IPs20.163.14.222 →
-5550a24 · 23 IPs20.163.14.222 →
HTTP555GET /
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
23 · 21 IPs216.180.246.59 →
HTTP555GET /favicon.ico
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
14 · 12 IPs216.180.246.59 →
RDP555/*�Cookie: mstshash=Administr 6 · 3 IPs80.94.95.43 →
HTTP555GET /admin/index.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
3 · 3 IPs216.180.246.59 →
HTTP555GET /manage/account/login
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
3 · 3 IPs216.180.246.59 →
HTTP555GET /+CSCOE+/logon.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.59 →
HTTP555GET /cgi-bin/login.cgi
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.59 →
HTTP555GET /login.htm
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.59 →
HTTP555GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
2 · 2 IPs68.183.5.101 →
HTTP555GET /index.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.59 →
IPCountryASNTop portsEvents
216.180.246.59crawler059.deepfield.net🇺🇸USAS396982 Google LLC55516
66.132.172.206206.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.5558
216.180.246.209crawler209.deepfield.net🇺🇸USAS396982 Google LLC5557
20.64.104.235azpdsg0j8r2h.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5554
80.94.95.43🇷🇴ROAS204428 SS-Net5553
216.180.246.68crawler068.deepfield.net🇺🇸USAS396982 Google LLC5553
8.216.18.107🇯🇵JPAS45102 Alibaba (US) Technology Co., Ltd.5553
20.163.14.222azpdwsjtiyxj.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.127.157.56azpdesfmfbd9.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
151.240.63.161🇺🇸USAS137409 GSL Networks Pty LTD5552
207.90.244.17🇺🇸USAS174 Cogent Communications, LLC5552
74.249.184.13azpdcs5qekrl.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.65.193.34azpdssp7vjwc.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
172.206.227.110azpdestah4qh.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
13.86.116.129azpdcge888r5.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.64.105.237azpdsg0k59cb.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.169.80.121azpdwss8jbmn.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
135.237.126.41azpdeszcvv3z.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.29.47.111azpdcsfqllb9.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.65.136.10azpdsgp5dil4.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.65.224.144azpdss774pa9.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
80.94.95.221🇷🇴ROAS204428 SS-Net5552
20.14.73.238azpdwspt8ldc.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
172.203.245.49azpdes1pz4fb.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.65.144.62azpdssibk9eo.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
135.237.127.87azpdesxr6hyv.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.163.2.42azpdwsply0rt.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.65.193.191azpdss44obes.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
40.119.40.152azpdss9cv4j4.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
20.64.104.79azpdsgbhg8mp.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
172.202.113.141azpdcgyvntpn.stretchoid.com🇺🇸USAS8075 Microsoft Corporation5552
104.152.52.227internettl.org🇺🇸USAS14987 Rethem Hosting LLC5551
91.196.152.201lucero.probe.onyphe.net🇫🇷FRAS213412 ONYPHE SAS5551
45.79.181.94luxembourg.scan.bufferover.run🇺🇸USAS63949 Akamai Connected Cloud5551
147.45.112.175🇻🇺VUAS209132 Alviva Holding Limited5551
172.236.228.222172-236-228-222.ip.linodeusercontent.com🇺🇸USAS63949 Akamai Connected Cloud5551
194.187.178.114🇭🇰HKAS215778 Alpha Strike Labs GmbH5551
194.187.176.189🇩🇪DEAS208843 Alpha Strike Labs GmbH5551
198.74.56.6198-74-56-6.ip.linodeusercontent.com🇺🇸USAS63949 Akamai Connected Cloud5551
194.187.176.14🇩🇪DEAS208843 Alpha Strike Labs GmbH5551
68.183.5.101🇳🇱NLAS14061 DigitalOcean, LLC5551
45.82.78.100🇩🇪DEAS212512 Detai Prosperous Technologies Limited5551
194.187.176.247🇩🇪DEAS208843 Alpha Strike Labs GmbH5551
123.160.223.72🇨🇳CNAS4134 Chinanet5551
194.187.178.56🇭🇰HKAS215778 Alpha Strike Labs GmbH5551
45.79.149.5045-79-149-50.ip.linodeusercontent.com🇺🇸USAS63949 Akamai Connected Cloud5551
194.187.178.144🇭🇰HKAS215778 Alpha Strike Labs GmbH5551
123.160.223.75🇨🇳CNAS4134 Chinanet5551
91.196.152.91nur.probe.onyphe.net🇫🇷FRAS213412 ONYPHE SAS5551
194.187.178.239🇭🇰HKAS215778 Alpha Strike Labs GmbH5551
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.