Port 7654

HoneyLabs honeypots recorded 242 probes against destination port 7654 from 23 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 12:52, most recently 2026-11-15 11:12 (UTC).

What the sensors show

The sources sat in 7 networks across 5 countries. No single address sent more than 19% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 67% of the probes from 14 addresses. 10 of the 23 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
178.128.67.24046DigitalOcean, LLCUS
159.203.184.18846DigitalOcean, LLCUS
45.79.190.3646Akamai Connected CloudUS
142.93.61.14646DigitalOcean, LLCUS
66.132.195.628Censys, Inc.US
66.132.159.1237Censys, Inc.US
66.132.195.867Censys, Inc.US
185.242.226.604IP Volume incUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC16214
AS63949Akamai Connected Cloud461
AS398324Censys, Inc.223
AS202425IP Volume inc41
AS12989Black HOST Ltd42
AS208137Feo Prest SRL31

Where it comes from

CountryProbes
United States232
Canada4
Iran3
Germany2
Belgium1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)16
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3614
Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.010
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.362

Port report

Port report

Loading