Port 2401
HoneyLabs honeypots recorded 63 probes against destination port 2401 from 41 distinct source IP addresses in the last 7 days.
First observed 2026-08-08 16:05:57, most recently 2026-08-14 09:47:07 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 69.5.169.164 | 3 | Hydra Communications Ltd | DE |
| 193.124.20.243 | 3 | Hydra Communications Ltd | DE |
| 190.215.216.211 | 3 | Gtd Internet S.A. | CL |
| 69.5.169.228 | 3 | Hydra Communications Ltd | DE |
| 69.5.169.209 | 3 | Hydra Communications Ltd | DE |
| 194.88.98.124 | 3 | Hydra Communications Ltd | DE |
| 69.5.169.204 | 3 | Hydra Communications Ltd | DE |
| 193.124.20.233 | 3 | Hydra Communications Ltd | DE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS25369 | Hydra Communications Ltd | 35 | 21 |
| AS213412 | ONYPHE SAS | 8 | 8 |
| AS396982 | Google LLC | 6 | 3 |
| AS209334 | Modat B.V. | 3 | 3 |
| AS14259 | Gtd Internet S.A. | 3 | 1 |
| AS45102 | Alibaba (US) Technology Co., Ltd. | 3 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Germany | 23 |
| United Kingdom | 18 |
| France | 8 |
| Canada | 4 |
| United States | 4 |
| Chile | 3 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | 35 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 8 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 6 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 | 4 |
| curl/7.61.1 | 1 |
Port report
Port report
Loading live data…