HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:8554

13 unique IPs · 47 events · 5 countries · 7 ASNs

Activity · last 24h

2026-06-30: 30 events2026-07-01: 17 events

peak 30 on 2026-06-30

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8554GET /20 · 9 IPs47.236.30.35 →
HTTP8554GET /favicon.ico
UA: fasthttp
3 · 3 IPs47.236.30.35 →
HTTP8554OPTIONS / RTSP/1.02 · 2 IPs216.180.246.210 →
HTTP8554GET /manage/account/login
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.210 →
HTTP8554GET /cgi-bin/login.cgi
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.210 →
HTTP8554GET /+CSCOE+/logon.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.210 →
HTTP8554GET /index.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.210 →
HTTP8554GET /admin/index.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
2 · 2 IPs216.180.246.210 →
HTTP8554GET /doc/index.html
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
1216.180.246.210 →
HTTP8554GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
168.183.5.101 →
HTTP8554GET /remote/login
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
1216.180.246.210 →
HTTP8554OPTIONS rtsp://<HONEYPOT>:8554 RTSP/1.0 CSeq: 1171.6.134.231 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 24h. Add or remove filters by clicking any value on a per-IP report.