Port 1501
HoneyLabs honeypots recorded 179 probes against destination port 1501 from 22 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 17:27, most recently 2026-11-14 05:22 (UTC).
What the sensors show
The sources sat in 12 networks across 9 countries. One address, 154.44.186.50, sent 45% of them. The largest source network was AS214036 (Ultahost, Inc.), with 45% of the probes from 1 address. 9 of the 22 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 154.44.186.50 | 81 | Ultahost, Inc. | ES |
| 134.195.154.53 | 56 | GLOBALHOSTINGSOLUTIONS INC | US |
| 176.120.22.61 | 11 | Proton66 OOO | RU |
| 152.32.197.166 | 9 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | BR |
| 118.193.44.169 | 4 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | HK |
| 117.181.50.98 | 2 | China Mobile Communications Group Co., Ltd. | CN |
| 91.196.152.32 | 1 | ONYPHE SAS | FR |
| 185.136.15.17 | 1 | AO ALMAZ | KZ |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS214036 | Ultahost, Inc. | 81 | 1 |
| AS46918 | GLOBALHOSTINGSOLUTIONS INC | 56 | 1 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 14 | 3 |
| AS198953 | Proton66 OOO | 11 | 1 |
| AS213412 | ONYPHE SAS | 8 | 8 |
| AS63949 | Akamai Connected Cloud | 2 | 2 |
Where it comes from
| Country | Probes |
|---|---|
| Spain | 81 |
| United States | 61 |
| Russia | 11 |
| Brazil | 9 |
| France | 8 |
| Hong Kong | 5 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| nerva/1.0 | 78 |
| Python/3.12 aiohttp/3.14.5 | 29 |
| Mozilla/5.0 (compatible; scanner) | 27 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 8 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 4 |
Port report
Port report
Loading