Port 122

HoneyLabs honeypots recorded 69 probes against destination port 122 from 36 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 10:09, most recently 2026-11-09 05:58 (UTC).

What the sensors show

The sources sat in 11 networks across 7 countries. No single address sent more than 14% of them. The largest source network was AS398324 (Censys, Inc.), with 26% of the probes from 2 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
66.132.195.18310Censys, Inc.US
66.132.195.1208Censys, Inc.US
206.189.227.396DigitalOcean, LLCUS
94.102.49.1933IP Volume incNL
98.80.4.1013Amazon.com, Inc.US
44.220.188.113Amazon.com, Inc.US
45.141.233.163MEVSPACE sp. z o.o.BG
18.97.5.1223Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS398324Censys, Inc.182
AS396982Google LLC1514
AS14618Amazon.com, Inc.104
AS14061DigitalOcean, LLC61
AS213412ONYPHE SAS66
AS202425IP Volume inc52

Where it comes from

CountryProbes
United States53
The Netherlands5
Bulgaria4
United Kingdom3
Canada2
Belgium1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)13
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.365
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.363
Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.362

Port report

Port report

Loading