HoneyLabs
LookupEnrichFeedsCVEsPayloadsCampaignsAEI IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:3388

128 unique IPs · 1.1K events · 16 countries · 28 ASNs

Activity · last 7d

2026-06-10: 264 events2026-06-11: 104 events2026-06-12: 129 events2026-06-13: 241 events2026-06-14: 94 events2026-06-15: 65 events2026-06-16: 219 events2026-06-17: 7 events

peak 264 on 2026-06-10

Top source networks · click to refine

AS396982 Google LLC21.8%
AS14061 DigitalOcean, LLC20.4%
AS63949 Akamai Connected Cloud19.0%
AS202425 IP Volume inc18.5%
query: port:3388×window1h24h7d30d🔒90d🔒
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP3388GET /
UA: Python/3.10 aiohttp/3.8.4
245 · 39 IPs94.102.49.155 →
RDP3388/*�Cookie: mstshash=Administr 133 · 8 IPs80.66.83.43 →
RDP3388RDP (X.224)03 00 01 9c 02 f0 80 7f 65 82 01 90 04 01 01 04 01 01 01 01 ff 30 19 02 …(412 bytes)22 · 22 IPs198.235.24.28 →
RDP3388RDP (X.224)03 00 01 9c 02 f0 80 7f 65 82 01 90 04 01 01 04 01 01 01 01 ff 30 19 02 …(412 bytes)22 · 22 IPs198.235.24.28 →
RDP3388RDP (X.224)03 00 01 9c 02 f0 80 7f 65 82 01 90 04 01 01 04 01 01 01 01 ff 30 19 02 …(412 bytes)22 · 22 IPs198.235.24.28 →
RDP3388*%�Cookie: mstshash=beio 22 · 11 IPs192.53.123.254 →
RDP3388RDP (X.224)03 00 01 9c 02 f0 80 7f 65 82 01 90 04 01 01 04 01 01 01 01 ff 30 19 02 …(412 bytes)22 · 22 IPs198.235.24.28 →
RDP3388RDP (X.224)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 02 00 00 0021 · 15 IPs74.207.241.211 →
HTTP3388GET /favicon.ico
UA: fasthttp
14 · 13 IPs43.98.196.250 →
RDP3388RDP (X.224)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 01 00 00 0011 · 11 IPs74.207.241.211 →
RDP3388,'�Cookie: mstshash=Administrator 11 · 11 IPs192.53.123.254 →
RDP3388RDP (X.224)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 00 00 00 0011 · 11 IPs74.207.241.211 →
IPCountryASNTop portsEvents
80.82.77.202rnd.group-ib.com🇳🇱NLAS202425 IP Volume inc3388140
80.66.83.43🇷🇺RUAS216473 Bashinskii Vadim Ruslanovich338874
94.102.49.155🇳🇱NLAS202425 IP Volume inc338864
80.66.83.80🇷🇺RUAS216473 Bashinskii Vadim Ruslanovich338845
45.33.5.69prod-barium-us-central-25.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud338842
96.126.101.176prod-beryllium-us-west-70.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud338840
64.225.34.157prod-boron-sfo2-83.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC338839
206.189.210.155prod-bromine-sfo2-163.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC338839
143.244.173.245prod-beryllium-nyc1-98.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC338839
67.207.81.60prod-barium-nyc1-36.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC338839
192.53.123.254prod-bromine-ca-central-34.li.binaryedge.ninja🇨🇦CAAS63949 Akamai Connected Cloud338839
165.227.57.18prod-boron-sfo2-59.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC338839
45.79.152.240prod-beryllium-us-east-19.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud338839
45.79.192.108prod-boron-us-southeast-24.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud338839
198.235.24.72🇺🇸USAS396982 Google LLC338811
147.185.132.33🇺🇸USAS396982 Google LLC338811
198.235.24.28🇺🇸USAS396982 Google LLC338811
35.203.211.168168.211.203.35.bc.googleusercontent.com🇬🇧GBAS396982 Google LLC338811
205.210.31.162🇺🇸USAS396982 Google LLC338811
205.210.31.45🇺🇸USAS396982 Google LLC338811
198.235.24.252🇺🇸USAS396982 Google LLC338811
198.235.24.95🇺🇸USAS396982 Google LLC338811
147.185.132.58🇺🇸USAS396982 Google LLC338811
162.216.149.99.149.216.162.bc.googleusercontent.com🇺🇸USAS396982 Google LLC338811
147.185.132.40🇺🇸USAS396982 Google LLC338811
205.210.31.220🇺🇸USAS396982 Google LLC338811
205.210.31.176🇺🇸USAS396982 Google LLC338811
162.216.150.236236.150.216.162.bc.googleusercontent.com🇺🇸USAS396982 Google LLC338811
205.210.31.84🇺🇸USAS396982 Google LLC338811
205.210.31.76🇺🇸USAS396982 Google LLC338811
147.185.132.63🇺🇸USAS396982 Google LLC338811
198.235.24.168🇺🇸USAS396982 Google LLC338811
198.235.24.126🇺🇸USAS396982 Google LLC338811
147.185.132.213🇺🇸USAS396982 Google LLC338811
147.185.132.118🇺🇸USAS396982 Google LLC338811
147.185.132.31🇺🇸USAS396982 Google LLC338811
109.105.210.62zl-dfwc-us-gp1-wk108a.internet-census.org🇵🇹PTAS21859 Zenlayer Inc33888
45.156.128.56sh-ams-nl-gp1-wk112a.internet-census.org🇵🇹PTAS211680 Sistemas Informaticos, S.A.33888
160.119.76.19🇸🇨SCAS49870 Alsycon B.V.33887
147.182.161.196prod-bromine-nyc1-210.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC33886
91.238.181.10🇫🇷FRAS49434 Fbw Networks SAS33886
194.180.49.143🇧🇬BGAS201814 MEVSPACE sp. z o.o.33885
109.105.210.72zl-dfwc-us-gp1-wk110a.internet-census.org🇵🇹PTAS21859 Zenlayer Inc33885
43.98.196.250🇸🇬SGAS45102 Alibaba US Technology Co., Ltd.33883
185.242.226.60security.criminalip.com🇺🇸USAS202425 IP Volume inc33883
67.205.143.145prod-beryllium-nyc1-46.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC33883
64.227.2.1prod-boron-nyc1-88.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC33883
74.207.241.211prod-beryllium-us-west-46.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud33883
137.184.194.202prod-boron-nyc1-102.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC33883
157.245.175.135prod-beryllium-sfo2-33.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC33883
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.