Port 60001

HoneyLabs honeypots recorded 525 probes against destination port 60001 from 105 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:51, most recently 2026-11-15 08:18 (UTC).

What the sensors show

The sources sat in 25 networks across 17 countries. No single address sent more than 11% of them. The largest source network was AS215925 (Vpsvault.host Ltd), with 24% of the probes from 4 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
154.80.128.19957Vpsvault.host LtdHK
157.230.162.19446DigitalOcean, LLCUS
96.126.96.11046Akamai Connected CloudUS
157.230.154.23346DigitalOcean, LLCUS
198.74.59.5946Akamai Connected CloudUS
45.198.224.7134Vpsvault.host LtdUS
45.198.224.7220Vpsvault.host LtdUS
80.94.95.12318SS-NetRO

Networks it comes from

ASNOrganisationProbesSource IPs
AS215925Vpsvault.host Ltd1284
AS14061DigitalOcean, LLC922
AS63949Akamai Connected Cloud922
AS8075Microsoft Corporation5736
AS396982Google LLC2017
AS204428SS-Net181

Where it comes from

CountryProbes
United States344
Hong Kong57
Romania20
United Arab Emirates17
South Africa16
United Kingdom13

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36128
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)17
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE12
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610

Port report

Port report

Loading