Port 1500

HoneyLabs honeypots recorded 339 probes against destination port 1500 from 53 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:51, most recently 2026-11-15 08:01 (UTC).

What the sensors show

The sources sat in 20 networks across 11 countries. No single address sent more than 17% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 41% of the probes from 3 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
186.179.60.12956Corporacion Dana S.A.US
142.93.27.13346DigitalOcean, LLCUS
45.33.113.17346Akamai Connected CloudUS
167.71.147.21046DigitalOcean, LLCUS
159.89.140.21646DigitalOcean, LLCUS
176.120.22.6111Proton66 OOORU
165.154.182.2198UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
152.32.200.228UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDBR

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1383
AS52393Corporacion Dana S.A.561
AS63949Akamai Connected Cloud472
AS396982Google LLC1714
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED162
AS51396Pfcloud UG (haftungsbeschrankt)146

Where it comes from

CountryProbes
United States278
Russia18
The Netherlands16
Brazil8
China6
United Kingdom6

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.08
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08

Port report

Port report

Loading