HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=8416

31 unique IPs · 44 events · 6 countries · 8 ASNs

Activity · last 7d

2026-06-24: 2 events2026-06-25: 10 events2026-06-26: 2 events2026-06-27: 3 events2026-06-29: 1 events2026-06-30: 5 events2026-07-01: 21 events

peak 21 on 2026-07-01

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8416GET /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
15 · 12 IPs195.184.76.136 →
HTTP8416GET /favicon.ico
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
6 · 6 IPs91.230.168.91 →
HTTP8416GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
3 · 2 IPs164.90.192.56 →
HTTP8416POST /wsman
UA: Microsoft WinRM Client
2104.152.52.229 →
-84163a 00 00 00 00 00 00 00 00 00 00 00 d4 07 00 00 00 00 00 00 61 64 6d 69 …(58 bytes)1104.152.52.217 →
-84160 `�1104.152.52.229 →
-8416/ !"&�1104.152.52.227 →
-8416f9 be b4 d9 76 65 72 73 69 6f 6e 00 00 00 00 00 56 00 00 00 91 96 9c 9e …(110 bytes)1104.152.52.229 →
-8416/multistream/1.0.0 /tls/1.0.01104.152.52.215 →
SOCKS58416SOCKS505 01 001104.152.52.228 →
-84160w�1.3.6.1.4.1.1466.200371104.152.52.229 →
HTTP8416OPTIONS rtsp://<HONEYPOT>/ RTSP/1.0 CSeq: 1 User-Agent: VLC media player/1.3.0 Accept: application/sdp1104.152.52.221 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.