Port report
Port 7
HoneyLabs honeypots recorded 260 probes against destination port 7 from 36 distinct source IP addresses in the last 7 days. The largest source network was Akamai Connected Cloud (AS63949). Most probes came from United States. First seen 2026-07-30, most recent 2026-08-05 17:04.
260
Events 7d
36
Source IPs
12
Source ASNs
10
Countries
Top source ASNs
- AS63949Akamai Connected Cloud139
- AS14061DigitalOcean, LLC47
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED18
- AS396982Google LLC17
- AS32475Internap Holding LLC14
- AS2105581337 Services GmbH10
- AS137280Kingsoft cloud corporation limited4
- AS201814MEVSPACE sp. z o.o.4
- AS209334Modat B.V.3
- AS209588Flyservers S.A.2
Top source countries
Top source IPs hitting port 7
- 74.207.243.16046 eventsRecognized scanner USseen Aug 3
- 23.239.29.3346 eventsRecognized scanner USseen Aug 3
- 167.99.153.24446 eventsRecognized scanner USseen Aug 3
- 45.56.72.10446 eventsRecognized scanner USseen Aug 3
- 162.217.100.19614 eventsObserved US路 AS32475 Internap Holding LLCseen Aug 2
- 150.107.38.25112 eventsObserved HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Aug 3
- 154.197.56.1636 eventsObserved SC路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 30
- 203.159.90.2164 eventsObserved NL路 AS210558 1337 Services GmbHseen Jul 31
- 104.250.52.934 eventsObserved SG路 AS137280 Kingsoft cloud corporation limitedseen Aug 1
- 124.198.132.1784 eventsObserved US路 AS210558 1337 Services GmbHseen Aug 1
- 194.180.49.1044 eventsObserved BG路 AS201814 MEVSPACE sp. z o.o.seen Aug 3
- 141.98.83.1112 eventsObserved PA路 AS209588 Flyservers S.A.seen Jul 31
- 45.88.186.812 eventsObserved US路 AS210558 1337 Services GmbHseen Aug 2
- 147.185.133.1602 eventsObserved US路 AS396982 Google LLCseen Aug 1
- 104.152.52.1251 eventRecognized scanner USseen Jul 30
- 162.216.150.1431 eventObserved USseen Jul 30
- 147.185.133.511 eventObserved US路 AS396982 Google LLCseen Aug 2
- 147.185.133.1951 eventObserved US路 AS396982 Google LLCseen Jul 30
- 85.217.149.591 eventRecognized scanner CAseen Jul 31
- 35.203.211.281 eventObserved GBseen Jul 30
- 162.216.149.901 eventObserved USseen Aug 2
- 147.185.133.931 eventObserved US路 AS396982 Google LLCseen Aug 3
- 85.217.149.91 eventRecognized scanner CAseen Jul 31
- 5.42.211.2501 eventObserved RU路 AS214833 PR Obrada Podataka Castles Novi Sadseen Jul 31
- 147.185.133.1061 eventObserved US路 AS396982 Google LLCseen Aug 1
Top user-agents on port 7
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3615
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)14
- beyondmemory-research (+https://beyondmemory.io/opt-out)4
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.33
- Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.361
- Mozilla/5.0 zgrab/0.x1
- curl/7.61.11
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.361
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.361
JSON: /api/port/7. CSV: /api/port/7?format=csv.