HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=7777

285 unique IPs · 1.6K events · 25 countries · 35 ASNs

Activity · last 7d

2026-06-26: 133 events2026-06-27: 189 events2026-06-28: 182 events2026-06-29: 453 events2026-06-30: 304 events2026-07-01: 130 events2026-07-02: 134 events2026-07-03: 44 events

peak 453 on 2026-06-29

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP7777/OracleGET /
UA: Python/3.10 aiohttp/3.8.4
858 · 157 IPs80.82.77.202 →
HTTP7777/OracleGET /favicon.ico
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
66 · 65 IPs94.231.206.200 →
-7777/OracleMGLNDD_<HONEYPOT>_777723 · 23 IPs20.40.216.117 →
-7777/Oracle0a21 · 6 IPs16.58.56.214 →
-7777/Oraclel 18 · 18 IPs8.216.9.30 →
-7777/Oraclehelp info16 · 16 IPs8.216.9.30 →
SOCKS57777/OracleSOCKS505 01 0015 · 6 IPs204.76.203.49 →
-7777/Oracle Terraria23810 · 10 IPs205.210.31.27 →
HTTP7777/OracleCONNECT proxy2.proxiesfood.com:443 HTTP/1.1 Host: proxy2.proxiesfood.com:4439 · 3 IPs204.76.203.214 →
-7777/Oracle,READY Socket-TypePULLIdentityhello9 · 3 IPs45.142.154.17 →
-7777/Oracleff 00 00 00 00 00 00 00 00 7f 03 01 4e 55 4c 4c 00 00 00 00 00 00 00 00 …(64 bytes)9 · 3 IPs45.142.154.17 →
RDP7777/Oracle/*�Cookie: mstshash=Administr 7 · 3 IPs147.45.112.175 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.