HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

Port 541

HoneyLabs honeypots recorded 357 probes against destination port 541 from 150 distinct source IP addresses in the last 7 days.

First observed 2026-08-29 02:55:02, most recently 2026-09-05 00:00:19 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
18.116.101.22035Amazon.com, Inc.US
18.218.118.20322Amazon.com, Inc.US
3.129.187.3816Amazon.com, Inc.US
3.131.220.12116Amazon.com, Inc.US
101.36.114.2527UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
101.36.97.807UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDGB
118.193.35.2027UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.217.1637UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSG

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.935
AS6939Hurricane Electric LLC8146
AS396982Google LLC3937
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED315
AS8075Microsoft Corporation2915
AS14987Rethem Hosting LLC2211

Where it comes from

CountryProbes
United States261
Hong Kong22
Singapore21
United Kingdom17
China11
South Korea7

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3669
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3613
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3612

Port report

Port report

Loading live data…