Port 1880
HoneyLabs honeypots recorded 110 probes against destination port 1880 from 57 distinct source IP addresses in the last 7 days.
First observed 2026-11-09 13:43, most recently 2026-11-15 07:00 (UTC).
What the sensors show
The sources sat in 22 networks across 16 countries. No single address sent more than 7% of them. The largest source network was AS396982 (Google LLC), with 17% of the probes from 13 addresses. 5 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 106.53.85.109 | 8 | Shenzhen Tencent Computer Systems Company Limited | CN |
| 154.80.128.173 | 7 | Vpsvault.host Ltd | HK |
| 170.231.236.98 | 6 | GRUPO PANAGLOBAL 15 S.A | PA |
| 170.231.237.214 | 5 | GRUPO PANAGLOBAL 15 S.A | PA |
| 101.36.127.85 | 4 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | HK |
| 193.242.184.154 | 4 | Rockhoster Private Limited | CA |
| 185.191.236.38 | 4 | GRUPO PANAGLOBAL 15 S.A | CH |
| 61.148.245.152 | 4 | China Unicom Beijing Province Network | CN |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 19 | 13 |
| AS264617 | GRUPO PANAGLOBAL 15 S.A | 15 | 3 |
| AS211680 | Sistemas Informaticos, S.A. | 10 | 6 |
| AS45090 | Shenzhen Tencent Computer Systems Company Limited | 8 | 1 |
| AS4808 | China Unicom Beijing Province Network | 7 | 2 |
| AS215925 | Vpsvault.host Ltd | 7 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Hong Kong | 20 |
| China | 19 |
| United States | 19 |
| Panama | 11 |
| Portugal | 10 |
| France | 7 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 19 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 10 |
| n2s/1.0 | 8 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0 | 8 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 7 |
Port report
Port report
Loading