HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
DocsBlog

Port 1720

HoneyLabs honeypots recorded 152 probes against destination port 1720 from 45 distinct source IP addresses in the last 7 days.

First observed 2026-08-08 00:22:05, most recently 2026-08-14 08:19:39 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
152.32.176.689UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDRU
152.32.255.949UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDVN
128.1.32.999UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDTW
152.32.145.497UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDJP
45.249.245.547UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.199.1127UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDBR
66.132.172.357Censys, Inc.US
193.26.115.4871337 Services GmbHUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED628
AS45102Alibaba (US) Technology Co., Ltd.153
AS396982Google LLC117
AS2105581337 Services GmbH92
AS398324Censys, Inc.71
AS10796Charter Communications Inc61

Where it comes from

CountryProbes
United States56
China9
Taiwan9
United Kingdom9
Vietnam9
Russia9

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.032
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.118
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.368
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06

Port report

Port report

Loading live data…