HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:8554

84 unique IPs · 1.7K events · 18 countries · 17 ASNs

Activity · last 7d

2026-06-24: 8 events2026-06-25: 723 events2026-06-26: 29 events2026-06-27: 37 events2026-06-28: 17 events2026-06-29: 100 events2026-06-30: 807 events2026-07-01: 17 events

peak 807 on 2026-06-30

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8554GET /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
134 · 41 IPs34.180.2.134 →
HTTP8554GET /favicon.ico
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
15 · 15 IPs91.230.168.179 →
HTTP8554GET /frontend/.git/config
UA: Mozilla/5.0 (Linux; Android 9; motorola one vision) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile S…
8 · 8 IPs34.123.77.14 →
HTTP8554GET /htdocs/.git/config
UA: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Avant Browser; Avant Browser; .NET CLR 1.0.3705; .NET CLR 1.1.4322; M…
8 · 8 IPs34.123.77.14 →
HTTP8554GET /html/.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
8 · 8 IPs34.123.77.14 →
HTTP8554GET /v2/.git/config
UA: Mozilla/5.0 (Linux; Android 4.4.2; LGMS323 Build/KOT49I.MS32310b) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.159…
8 · 8 IPs34.123.77.14 →
HTTP8554GET /static/.git/config
UA: Bloglines/3.1 (http://www.bloglines.com)
8 · 8 IPs34.123.77.14 →
HTTP8554GET /code/.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36
8 · 8 IPs34.123.77.14 →
HTTP8554GET /dashboard/.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
8 · 8 IPs34.123.77.14 →
HTTP8554GET /www/.git/config
UA: DoCoMo/2.0 SH901iC(c100;TB;W24H12)
8 · 8 IPs34.123.77.14 →
HTTP8554GET /dist/.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 1083) AppleWebKit/537.36 (KHTML like Gecko) Chrome/28.0.1469.0 Safari/537.36
8 · 8 IPs34.123.77.14 →
HTTP8554GET /v3/.git/config
UA: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5…
8 · 8 IPs34.123.77.14 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.