Port 880

HoneyLabs honeypots recorded 332 probes against destination port 880 from 43 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 10:34, most recently 2026-11-15 10:41 (UTC).

What the sensors show

The sources sat in 18 networks across 11 countries. No single address sent more than 17% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 55% of the probes from 4 addresses. 8 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.152.14356GLOBALHOSTINGSOLUTIONS INCUS
178.128.179.2346DigitalOcean, LLCUS
64.227.54.15846DigitalOcean, LLCUS
167.172.215.17946DigitalOcean, LLCUS
167.172.122.1946DigitalOcean, LLCUS
216.180.246.19816Google LLCUS
216.180.246.20116Google LLCUS
36.156.22.26China Mobile communications corporationCN

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1844
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS396982Google LLC5120
AS63199CDS Global Cloud Co., Ltd61
AS201814MEVSPACE sp. z o.o.61
AS56046China Mobile communications corporation61

Where it comes from

CountryProbes
United States293
China11
United Kingdom9
Bulgaria6
Russia4
France3

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)32
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610

Port report

Port report

Loading