HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=8607

19 unique IPs · 39 events · 9 countries · 13 ASNs

Activity · last 7d

2026-06-28: 4 events2026-06-29: 11 events2026-06-30: 12 events2026-07-01: 4 events2026-07-02: 3 events2026-07-03: 1 events2026-07-05: 4 events

peak 12 on 2026-06-30

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8607GET /
UA: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)
20 · 13 IPs31.14.32.4 →
HTTP8607GET /favicon.ico
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
3 · 2 IPs123.160.223.72 →
HTTP8607GET http://161.97.169.9:8899/verify2161.97.169.9 →
SOCKS58607SOCKS505 03 00 01 022161.97.169.9 →
SOCKS58607SOCKS505 01 00179.164.41.168 →
-8607�����179.164.41.168 →
HTTP8607GET /global-protect/login.esp
UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/5…
179.124.58.126 →
-8607�<HONEYPOT>!�1151.241.119.113 →
HTTP8607GET /+CSCOE+/logon.html
UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/5…
179.124.58.126 →
-86071151.240.102.64 →
HTTP8607GET /auth.html
UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/5…
179.124.58.126 →
HTTP8607GET /sslvpn_logon.shtml
UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/5…
179.124.58.126 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.