HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 1454

HoneyLabs honeypots recorded 29 probes against destination port 1454 from 12 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 19:11, most recently 2026-11-14 22:19 (UTC).

What the sensors show

The sources sat in 7 networks across 6 countries. One address, 207.90.244.4, sent 28% of them. The largest source network was AS174 (Cogent Communications, LLC), with 28% of the probes from 1 address. 1 of the 12 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
207.90.244.48Cogent Communications, LLCUS
80.66.83.807Bashinskii Vadim RuslanovichRU
185.242.226.854IP Volume incUS
34.62.204.2382Google LLCBE
162.216.149.1941Google LLCUS
147.185.133.221Google LLCUS
80.94.95.2371SS-NetRO
31.57.216.391VPS Dedicated LLCAE

Networks it comes from

ASNOrganisationProbesSource IPs
AS174Cogent Communications, LLC81
AS216473Bashinskii Vadim Ruslanovich71
AS396982Google LLC76
AS202425IP Volume inc41
AS210328AO ALMAZ11
AS197769VPS Dedicated LLC11

Where it comes from

CountryProbes
United States15
Russia7
Belgium4
United Arab Emirates1
Romania1
Kazakhstan1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364
python-requests/2.34.24
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.364
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3

Port report

Port report

Loading