Port 25554

HoneyLabs honeypots recorded 25 probes against destination port 25554 from 10 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 04:57, most recently 2026-11-07 13:52 (UTC).

What the sensors show

The sources sat in 10 networks across 8 countries. One address, 167.94.146.62, sent 32% of them. The largest source network was AS398705 (Censys, Inc.), with 32% of the probes from 1 address. 1 of the 10 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
167.94.146.628Censys, Inc.US
153.68.200.2486TELUS Communications Inc.CA
162.216.149.1664Google LLCUS
201.231.68.2301Telecom Argentina S.A.AR
31.57.216.391VPS Dedicated LLCAE
81.107.250.211Virgin MediaGB
176.120.22.1791Proton66 OOORU
176.65.148.1421Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS398705Censys, Inc.81
AS852TELUS Communications Inc.61
AS396982Google LLC41
AS201814MEVSPACE sp. z o.o.11
AS7303Telecom Argentina S.A.11
AS212655YouFibre Limited11

Where it comes from

CountryProbes
United States12
Canada6
United Kingdom2
Argentina1
United Arab Emirates1
The Netherlands1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4

Port report

Port report

Loading