Port report
Port 631IPP
7-day honeypot probe activity targeting destination port 631. First seen 2026-05-14, most recent 2026-05-21 09:55.
Events 7d
606
Source IPs
181
Source ASNs
27
Countries
16
Top source ASNs
Top source countries
Top source IPs hitting port 631
- 16.58.56.21452 eventsUSΒ· AS16509 Amazon.com, Inc.
- 212.71.247.14146 eventsGBΒ· AS63949 Akamai Connected Cloud
- 204.48.29.13346 eventsUSΒ· AS14061 DigitalOcean, LLC
- 159.65.98.16746 eventsUSΒ· AS14061 DigitalOcean, LLC
- 68.183.161.9246 eventsUSΒ· AS14061 DigitalOcean, LLC
- 18.116.101.22021 eventsUSΒ· AS16509 Amazon.com, Inc.
- 134.209.252.20820 eventsDEΒ· AS14061 DigitalOcean, LLC
- 68.183.68.23120 eventsDEΒ· AS14061 DigitalOcean, LLC
- 104.248.249.14420 eventsDEΒ· AS14061 DigitalOcean, LLC
- 128.136.131.8410 eventsUSΒ· AS13649 Flexential Colorado Corp.
- 18.218.118.2038 eventsUSΒ· AS16509 Amazon.com, Inc.
- 3.130.168.28 eventsUSΒ· AS16509 Amazon.com, Inc.
- 165.154.164.577 eventsDEΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.33.727 eventsPHΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.120.2267 eventsTHΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 160.119.76.586 eventsSCΒ· AS49870 Alsycon B.V.
- 159.89.150.396 eventsUSΒ· AS14061 DigitalOcean, LLC
- 3.129.187.384 eventsUSΒ· AS16509 Amazon.com, Inc.
- 18.188.191.604 eventsUSΒ· AS16509 Amazon.com, Inc.
- 5.61.209.2244 eventsSCΒ· AS206264 Amarutu Technology Ltd
- 160.119.76.244 eventsSCΒ· AS49870 Alsycon B.V.
- 86.54.31.324 eventsCAΒ· AS12989 Black HOST Ltd
- 160.119.76.523 eventsSCΒ· AS49870 Alsycon B.V.
- 123.160.223.753 eventsCNΒ· AS4134 Chinanet
- 123.160.223.733 eventsCNΒ· AS4134 Chinanet
Top user-agents on port 631
- Mozilla/5.0 zgrab/0.x75
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3673
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)39
- Mozilla/5.013
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Go-http-client/1.17
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.04
JSON: /api/port/631. CSV: /api/port/631?format=csv.