HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 1723 (PPTP)

HoneyLabs honeypots recorded 5,631 probes against destination port 1723 (PPTP) from 213 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:31, most recently 2026-11-15 08:25 (UTC).

What the sensors show

The sources sat in 41 networks across 25 countries. One address, 46.29.26.163, sent 72% of them. The largest source network was AS132359 (M/S ROBI TRADERS), with 72% of the probes from 1 address. 13 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
46.29.26.1634,054M/S ROBI TRADERSTR
93.123.109.6231Techoff Srv LimitedBG
185.246.128.192177Anastasiia HeinSE
102.220.162.192159VPS Dedicated LLCSI
89.248.171.24144IP Volume incNL
93.174.93.12103IP Volume incNL
80.82.77.20258IP Volume incNL
62.60.226.16631Femo It Solutions LimitedDE

Networks it comes from

ASNOrganisationProbesSource IPs
AS132359M/S ROBI TRADERS4,0541
AS202425IP Volume inc3316
AS48090Techoff Srv Limited2362
AS197769VPS Dedicated LLC1804
AS42237Anastasiia Hein1771
AS398324Censys, Inc.10317

Where it comes from

CountryProbes
Türkiye4,054
United States437
The Netherlands334
Bulgaria236
Slovenia178
Sweden177

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4329
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)105
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3659
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)30
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016

Port report

Port report

Loading