Port 12200
HoneyLabs honeypots recorded 30 probes against destination port 12200 from 14 distinct source IP addresses in the last 7 days.
First observed 2026-09-23 09:45:07, most recently 2026-09-28 00:56:35 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 121.40.42.49 | 13 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 185.180.141.115 | 3 | Zenlayer Inc | PT |
| 47.95.209.9 | 2 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 47.95.207.8 | 2 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 85.217.149.17 | 1 | Modat B.V. | CA |
| 47.95.206.102 | 1 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 120.55.64.150 | 1 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 85.217.149.1 | 1 | Modat B.V. | CA |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | 19 | 5 |
| AS209334 | Modat B.V. | 5 | 5 |
| AS21859 | Zenlayer Inc | 4 | 2 |
| AS14061 | DigitalOcean, LLC | 2 | 2 |
Where it comes from
| Country | Probes |
|---|---|
| China | 19 |
| Canada | 5 |
| Portugal | 4 |
| India | 1 |
| United States | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | 5 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 | 4 |
| python-httpx/0.28.1 | 2 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 2 |
| Mozilla/5.0 zgrab/0.x | 1 |
Port report
Port report
Loading live data…