Port 7

HoneyLabs honeypots recorded 259 probes against destination port 7 from 41 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 19:00, most recently 2026-11-08 14:28 (UTC).

What the sensors show

The sources sat in 12 networks across 10 countries. No single address sent more than 18% of them. The largest source network was AS63949 (Akamai Connected Cloud), with 36% of the probes from 4 addresses. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
66.228.56.17946Akamai Connected CloudUS
64.227.54.15846DigitalOcean, LLCUS
172.104.209.7546Akamai Connected CloudUS
167.71.147.21046DigitalOcean, LLCUS
45.141.233.166MEVSPACE sp. z o.o.BG
192.51.188.64Hdtidc LimitedCN
87.251.64.1314Shesternin Vladimir AnatolievichRU
106.75.24.614China Unicom Beijing Province NetworkCN

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud944
AS14061DigitalOcean, LLC922
AS396982Google LLC1616
AS212835Shesternin Vladimir Anatolievich165
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED155
AS137280Kingsoft cloud corporation limited82

Where it comes from

CountryProbes
United States202
Russia16
China8
Singapore8
Bulgaria7
United Kingdom7

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3616
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
curl/7.29.010
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.362

Port report

Port report

Loading