HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=7080

129 unique IPs · 202 events · 13 countries · 17 ASNs

Activity · last 7d

2026-06-28: 17 events2026-06-29: 24 events2026-06-30: 38 events2026-07-01: 32 events2026-07-02: 47 events2026-07-03: 17 events2026-07-04: 21 events2026-07-05: 6 events

peak 47 on 2026-07-02

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP7080GET /
UA: curl/7.64.1
103 · 78 IPs47.84.113.184 →
HTTP7080GET /favicon.ico
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
13 · 12 IPs195.184.76.80 →
RDP7080/*�Cookie: mstshash=Administr 680.66.83.80 →
HTTP7080GET /.well-known/security.txt
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36
4 · 4 IPs165.154.163.10 →
HTTP7080GET /api/jolokia/list
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs198.235.24.80 →
HTTP7080GET /jolokia/version
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs205.210.31.148 →
HTTP7080GET /jolokia/list
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs205.210.31.11 →
HTTP7080GET /api/jolokia/version
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs198.235.24.117 →
HTTP7080GET /jolokia/write
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs205.210.31.14 →
HTTP7080POST /_next/server
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.…
4 · 2 IPs160.119.71.92 →
HTTP7080POST /api/route
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.
4 · 2 IPs160.119.71.92 →
HTTP7080POST /api
UA: Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 C…
4 · 2 IPs160.119.71.92 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.