Port 548
HoneyLabs honeypots recorded 147 probes against destination port 548 from 89 distinct source IP addresses in the last 7 days.
First observed 2026-11-01 20:12, most recently 2026-11-08 16:57 (UTC).
What the sensors show
The sources sat in 15 networks across 8 countries. No single address sent more than 10% of them. The largest source network was AS396982 (Google LLC), with 38% of the probes from 45 addresses. 9 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 185.180.141.42 | 14 | Zenlayer Inc | PT |
| 134.209.221.159 | 7 | DigitalOcean, LLC | US |
| 188.166.46.111 | 6 | DigitalOcean, LLC | NL |
| 45.156.129.70 | 4 | Sistemas Informaticos, S.A. | PT |
| 43.106.106.207 | 4 | Alibaba (US) Technology Co., Ltd. | SG |
| 93.123.109.123 | 4 | Techoff Srv Limited | BG |
| 185.180.141.44 | 4 | Zenlayer Inc | PT |
| 185.242.226.74 | 4 | IP Volume inc | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 56 | 45 |
| AS6939 | Hurricane Electric LLC | 21 | 16 |
| AS21859 | Zenlayer Inc | 20 | 4 |
| AS14061 | DigitalOcean, LLC | 13 | 2 |
| AS22168 | The Shadowserver Foundation, Inc. | 6 | 6 |
| AS211680 | Sistemas Informaticos, S.A. | 5 | 2 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 98 |
| Portugal | 25 |
| The Netherlands | 6 |
| Bulgaria | 6 |
| Singapore | 5 |
| China | 3 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 10 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 10 |
| python-httpx/0.28.1 | 10 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 4 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 | 2 |
Port report
Port report
Loading