Port 45001

HoneyLabs honeypots recorded 142 probes against destination port 45001 from 29 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 00:25, most recently 2026-11-15 18:54 (UTC).

What the sensors show

The sources sat in 9 networks across 7 countries. One address, 89.248.171.24, sent 35% of them. The largest source network was AS202425 (IP Volume inc), with 83% of the probes from 7 addresses. 14 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.2450IP Volume incNL
93.174.93.1240IP Volume incNL
80.82.77.20217IP Volume incNL
89.248.172.338IP Volume incNL
86.54.31.362Black HOST LtdCA
47.84.140.02Alibaba (US) Technology Co., Ltd.SG
193.32.162.2111Unmanaged LtdRO
195.184.76.1031ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc1187
AS213412ONYPHE SAS88
AS396982Google LLC77
AS12989Black HOST Ltd21
AS45102Alibaba (US) Technology Co., Ltd.21
AS47890Unmanaged Ltd22

Where it comes from

CountryProbes
The Netherlands120
United States13
Canada3
Romania2
Singapore2
Belgium1

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4105
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.364

Port report

Port report

Loading