HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 1701

HoneyLabs honeypots recorded 334 probes against destination port 1701 from 29 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 20:16, most recently 2026-11-15 18:09 (UTC).

What the sensors show

The sources sat in 12 networks across 9 countries. One address, 89.248.171.24, sent 33% of them. The largest source network was AS202425 (IP Volume inc), with 74% of the probes from 4 addresses. 17 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.24109IP Volume incNL
93.174.93.1266IP Volume incNL
80.82.77.20255IP Volume incNL
3.129.187.3822Amazon.com, Inc.US
89.248.172.3316IP Volume incNL
18.116.101.22016Amazon.com, Inc.US
18.218.118.2039Amazon.com, Inc.US
152.32.174.1867UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc2464
AS16509Amazon.com, Inc.484
AS212835Shesternin Vladimir Anatolievich124
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS14061DigitalOcean, LLC61
AS213412ONYPHE SAS44

Where it comes from

CountryProbes
The Netherlands247
United States54
Russia12
Hong Kong7
Germany6
France4

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4246
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3648
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3618
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.04

Port report

Port report

Loading