HoneyLabs
LookupEnrichFeedsCVEsPayloadsCampaignsAEI IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:58603

371 unique IPs · 1.2K events · 21 countries · 23 ASNs

Activity · last 30d

2026-05-16: 2 events2026-05-17: 30 events2026-05-18: 25 events2026-05-19: 59 events2026-05-20: 26 events2026-05-21: 32 events2026-05-22: 50 events2026-05-23: 16 events2026-05-24: 17 events2026-05-25: 34 events2026-05-26: 25 events2026-05-27: 31 events2026-05-28: 39 events2026-05-29: 45 events2026-05-30: 34 events2026-05-31: 54 events2026-06-01: 91 events2026-06-02: 59 events2026-06-03: 49 events2026-06-04: 48 events2026-06-05: 54 events2026-06-06: 20 events2026-06-07: 33 events2026-06-08: 31 events2026-06-09: 24 events2026-06-10: 27 events2026-06-11: 49 events2026-06-12: 55 events2026-06-13: 61 events2026-06-14: 31 events2026-06-15: 27 events

peak 91 on 2026-06-01

Top source networks · click to refine

AS396982 Google LLC14.3%
AS398705 Censys, Inc.14.3%
AS398324 Censys, Inc.12.9%
query: port:58603×window: 30d
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP58603GET /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
456 · 307 IPs147.185.132.234 →
HTTP58603GET /favicon.ico
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
344 · 147 IPs167.94.146.51 →
TLS5860350 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)84 · 68 IPs167.94.146.51 →
HTTP58603GET /.well-known/security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
32 · 32 IPs66.132.195.77 →
HTTP58603GET /robots.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
27 · 26 IPs167.94.146.62 →
HTTP58603GET /sitemap.xml
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
22 · 22 IPs66.132.195.35 →
HTTP58603GET /login
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
19 · 18 IPs216.180.246.34 →
HTTP58603GET /security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
14 · 14 IPs66.132.172.191 →
TPKT58603TPKT / COTP (ISO-TSAP)03 00 00 0b 06 e0 00 00 00 00 0011 · 11 IPs165.154.172.87 →
HTTP58603GET /config.json
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11
11 · 11 IPs165.154.172.87 →
RDP586033.�Cookie: mstshash=Administrator 11 · 11 IPs165.154.172.87 →
HTTP58603GET /wiki
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
10 · 10 IPs167.94.146.51 →
IPCountryASNTop portsEvents
167.94.146.6262.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860348
167.94.146.6363.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860316
167.94.146.5959.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860316
216.180.246.149crawler149.deepfield.net🇺🇸USAS396982 Google LLC5860316
167.94.146.4949.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860316
199.45.155.9090.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.5860316
66.132.172.3333.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.5860316
216.180.246.34crawler034.deepfield.net🇺🇸USAS396982 Google LLC5860316
66.132.195.6161.195.132.66.censys-scanner.com🇺🇸USunknown network5860316
199.45.155.9191.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.5860316
167.94.146.5050.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860316
66.132.186.196196.186.132.66.censys-scanner.com🇺🇸USunknown network5860316
167.94.146.6060.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.5860316
66.132.195.4242.195.132.66.censys-scanner.com🇺🇸USunknown network5860316
216.180.246.100crawler100.deepfield.net🇺🇸USAS396982 Google LLC5860316
165.154.172.87🇺🇸USAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED586039
167.94.146.5151.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.586038
66.132.172.194194.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
199.45.155.6969.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
199.45.155.7070.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
66.132.172.102102.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.172.133133.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.172.141141.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
199.45.155.8383.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
167.94.146.5757.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.586038
66.132.172.130130.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.195.3939.195.132.66.censys-scanner.com🇺🇸USunknown network586038
199.45.155.6565.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
66.132.172.4646.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
199.45.154.137137.154.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
199.45.154.113113.154.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
66.132.195.8787.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.195.3636.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.195.3535.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.195.8383.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.172.197197.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.195.9292.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.172.178178.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.172.191191.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.195.7777.195.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.172.219219.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.172.222222.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
167.94.146.5656.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.586038
167.94.146.6161.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.586038
66.132.172.4242.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.586038
66.132.224.8787.224.132.66.censys-scanner.com🇺🇸USunknown network586038
66.132.186.197197.186.132.66.censys-scanner.com🇺🇸USunknown network586038
199.45.155.106106.155.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
199.45.154.138138.154.45.199.censys-scanner.com🇺🇸USAS398722 Censys, Inc.586038
66.132.195.116116.195.132.66.censys-scanner.com🇺🇸USunknown network586038
Showing top 50 by event count. Window is the last 30d. Add or remove filters by clicking any value on a per-IP report.