Port report
Port 554
7-day honeypot probe activity targeting destination port 554. First seen 2026-07-10, most recent 2026-07-17 21:29.
2,496
Events 7d
220
Source IPs
36
Source ASNs
20
Countries
Top source ASNs
- AS16276OVH SAS807
- AS34351MTS PJSC364
- AS266192LP PROVEDORA DE INTERNET E INSTALACOES DE REDES TE279
- AS398324Censys, Inc.159
- AS402253SKN Subnet & Telecom Ltd153
- AS16509Amazon.com, Inc.115
- AS14061DigitalOcean, LLC94
- AS398705Censys, Inc.70
- AS7545TPG Telecom Limited70
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED68
Top source countries
- United States624
- Canada504
- Russia364
- France324
- Brazil279
- Switzerland153
- Australia70
- Hong Kong53
- China37
- Seychelles24
Top source IPs hitting port 554
- 51.222.40.109500 eventsProbing CA路 AS16276 OVH SASseen Jul 13
- 80.70.96.143364 eventsProbing RU路 AS34351 MTS PJSCseen Jul 13
- 51.210.0.2306 eventsProbing FR路 AS16276 OVH SASseen Jul 15
- 138.204.44.206279 eventsProbing BR路 AS266192 LP PROVEDORA DE INTERNET E INSTALACOES DE REDES TEseen Jul 13
- 209.99.190.172151 eventsProbing CH路 AS402253 SKN Subnet & Telecom Ltdseen Jul 13
- 124.149.176.7670 eventsProbing AU路 AS7545 TPG Telecom Limitedseen Jul 15
- 67.205.129.19446 eventsKnown scanner USseen Jul 17
- 64.225.115.13746 eventsKnown scanner USseen Jul 17
- 45.33.113.8246 eventsKnown scanner USseen Jul 17
- 16.58.56.21439 eventsKnown scanner USseen Jul 17
- 3.130.168.225 eventsKnown scanner USseen Jul 16
- 167.94.146.6120 eventsKnown scanner USseen Jul 14
- 167.94.146.5520 eventsKnown scanner USseen Jul 14
- 18.116.101.22018 eventsKnown scanner USseen Jul 17
- 3.129.187.3816 eventsKnown scanner USseen Jul 15
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 15
- 152.32.189.12812 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 14
- 160.119.71.9212 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 16
- 18.218.118.20311 eventsKnown scanner USseen Jul 15
- 66.132.186.20210 eventsKnown scanner USseen Jul 15
- 66.132.195.5210 eventsKnown scanner USseen Jul 12
- 66.132.195.11010 eventsKnown scanner USseen Jul 17
- 66.132.186.18710 eventsKnown scanner USseen Jul 11
- 66.132.195.9010 eventsKnown scanner USseen Jul 16
- 66.132.172.21810 eventsKnown scanner USseen Jul 10
Top user-agents on port 554
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)155
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36115
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.048
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3614
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Linux; U; Android 4.2.2; he-il; NEO-X5-116A Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.306
- Go-http-client/1.16
JSON: /api/port/554. CSV: /api/port/554?format=csv.