HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:7777

223 unique IPs · 1.7K events · 23 countries · 38 ASNs

Activity · last 7d

2026-06-14: 87 events2026-06-15: 646 events2026-06-16: 192 events2026-06-17: 143 events2026-06-18: 177 events2026-06-19: 188 events2026-06-20: 147 events2026-06-21: 121 events

peak 646 on 2026-06-15

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP7777/OracleGET /
UA: curl/7.68.0
955 · 140 IPs151.243.11.35 →
HTTP7777/OracleGET /favicon.ico
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
56 · 55 IPs62.210.142.173 →
-7777/OracleMGLNDD_<HONEYPOT>_777720 · 20 IPs20.14.73.168 →
-7777/Oracle0a16 · 7 IPs3.130.168.2 →
RDP7777/Oracle/*�Cookie: mstshash=Administr 14 · 7 IPs192.253.248.180 →
SOCKS57777/OracleSOCKS505 01 0013 · 6 IPs204.76.203.49 →
-7777/Oracle Terraria23812 · 11 IPs147.185.132.201 →
-7777/Oraclehelp info10 · 10 IPs8.216.8.127 →
-7777/Oracleff 00 00 00 00 00 00 00 00 7f 03 01 4e 55 4c 4c 00 00 00 00 00 00 00 00 …(64 bytes)9 · 3 IPs152.32.170.42 →
HTTP7777/OracleCONNECT proxy2.proxiesfood.com:443 HTTP/1.1 Host: proxy2.proxiesfood.com:4439 · 5 IPs204.76.203.213 →
-7777/Oraclel 9 · 9 IPs8.216.8.127 →
-7777/Oracle,READY Socket-TypePULLIdentityhello9 · 3 IPs152.32.170.42 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.