Port report
Port 1197
7-day honeypot probe activity targeting destination port 1197. First seen 2026-07-20, most recent 2026-07-27 14:24.
266
Events 7d
27
Source IPs
9
Source ASNs
7
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 1197
- 80.82.77.202117 eventsKnown scanner NLseen Jul 27
- 94.102.49.155111 eventsProbing NL路 AS202425 IP Volume incseen Jul 27
- 46.161.50.1085 eventsKnown scanner RUseen Jul 26
- 101.36.112.1013 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 26
- 89.248.172.102 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 5.101.64.62 eventsKnown scanner RUseen Jul 26
- 176.32.193.162 eventsProbing AM路 AS197834 Ucom CJSCseen Jul 25
- 162.216.149.2182 eventsProbing USseen Jul 26
- 35.203.211.2302 eventsProbing GBseen Jul 24
- 35.203.210.1172 eventsProbing GBseen Jul 22
- 45.91.64.82 eventsKnown scanner RUseen Jul 26
- 80.82.70.401 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 91.230.168.1001 eventsKnown scanner USseen Jul 21
- 85.217.149.141 eventsKnown scanner CAseen Jul 21
- 93.174.93.341 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 89.248.171.231 eventsKnown scanner NLseen Jul 25
- 91.230.168.211 eventsKnown scanner USseen Jul 27
- 178.128.158.731 eventsProbing US路 AS14061 DigitalOcean, LLCseen Jul 22
- 85.217.149.81 eventsKnown scanner CAseen Jul 22
- 195.184.76.991 eventsKnown scanner USseen Jul 23
- 91.230.168.1721 eventsKnown scanner USseen Jul 23
- 45.91.64.61 eventsKnown scanner RUseen Jul 26
- 94.102.63.231 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 91.230.168.611 eventsKnown scanner USseen Jul 24
- 91.230.168.01 eventsKnown scanner USseen Jul 21
Top user-agents on port 1197
- Python/3.10 aiohttp/3.8.4219
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.367
- fasthttp7
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.366
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
- curl/7.29.02
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)2
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us; Silk/1.0.13.81_10003810) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16 Silk-Accelerated=true2
- Mozilla/5.0 zgrab/0.x1
JSON: /api/port/1197. CSV: /api/port/1197?format=csv.