HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 47001

HoneyLabs honeypots recorded 911 probes against destination port 47001 from 155 distinct source IP addresses in the last 7 days.

First observed 2026-11-04 16:06, most recently 2026-11-11 14:44 (UTC).

What the sensors show

The sources sat in 23 networks across 16 countries. No single address sent more than 5% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 35% of the probes from 47 addresses. 16 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
50.116.2.17247Akamai Connected CloudUS
45.56.109.8047Akamai Connected CloudUS
104.248.223.7047DigitalOcean, LLCUS
178.128.71.14047DigitalOcean, LLCUS
128.1.132.22042UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
93.174.93.1229IP Volume incNL
89.248.172.3328IP Volume incNL
152.32.170.5524UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED31847
AS63949Akamai Connected Cloud1195
AS14061DigitalOcean, LLC1184
AS202425IP Volume inc824
AS398324Censys, Inc.7410
AS396982Google LLC6229

Where it comes from

CountryProbes
United States499
Hong Kong229
The Netherlands90
Thailand28
Belgium12
Seychelles12

Client strings seen on this port

User agentProbes
Go-http-client/1.1123
Python/3.10 aiohttp/3.8.482
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)80
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)32
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity30

Port report

Port report

Loading