Port report
Port 554
7-day honeypot probe activity targeting destination port 554. First seen 2026-05-14, most recent 2026-05-21 11:59.
Events 7d
2,064
Source IPs
215
Source ASNs
33
Countries
21
Top source ASNs
Top source countries
- Germany551
- United States488
- Canada477
- Russia326
- Hong Kong47
- China40
- Portugal25
- France23
- Seychelles20
- Japan15
Top source IPs hitting port 554
- 167.172.99.56542 eventsDE· AS14061 DigitalOcean, LLC
- 51.222.40.109472 eventsCA· AS16276 OVH SAS
- 80.70.96.146316 eventsRU· AS34351 MTS PJSC
- 104.248.212.19546 eventsUS· AS14061 DigitalOcean, LLC
- 137.184.19.3246 eventsUS· AS14061 DigitalOcean, LLC
- 45.33.83.7345 eventsUS· AS63949 Akamai Connected Cloud
- 143.110.207.2336 eventsUS· AS14061 DigitalOcean, LLC
- 18.218.118.20323 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3821 eventsUS· AS16509 Amazon.com, Inc.
- 152.32.170.5518 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 16.58.56.21415 eventsUS· AS16509 Amazon.com, Inc.
- 164.52.24.18212 eventsJP· AS63199 CDS Global Cloud Co., Ltd
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 89.205.21.20112 eventsMK· AS41557 Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip
- 3.131.220.12111 eventsUS· AS16509 Amazon.com, Inc.
- 66.132.172.4010 eventsUS· AS398324 Censys, Inc.
- 66.132.186.17710 eventsUS
- 199.45.155.7910 eventsUS· AS398722 Censys, Inc.
- 199.45.154.11410 eventsUS· AS398722 Censys, Inc.
- 167.94.146.5110 eventsUS· AS398705 Censys, Inc.
- 167.94.146.5610 eventsUS· AS398705 Censys, Inc.
- 66.132.172.13210 eventsUS· AS398324 Censys, Inc.
- 199.45.155.7510 eventsUS· AS398722 Censys, Inc.
- 66.132.186.18910 eventsUS
- 66.132.172.4710 eventsUS· AS398324 Censys, Inc.
Top user-agents on port 554
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3678
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)65
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.052
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.3612
- Mozilla/5.0 (X11; Linux; rv:74.0) Gecko/20100101 Firefox/74.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- python-httpx/0.28.110
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3610
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368
JSON: /api/port/554. CSV: /api/port/554?format=csv.